Communicating types of private identifiers supported in a WLAN network
Methods, systems, and computer readable media can be operable to facilitate an exchange of messages between an access point and a station, wherein the access point requests a unique identifier that meet certain requirements of a unique identifier configuration from the station. The station initiates a secure connection with the access point prior to associating with the access point. The station may either respond with a message declining to provide a unique identifier or respond with a message including a unique identifier, along with a response unique identifier configuration, to be used by the access point for the station via the secure connection. The response from the station may include additional limitations on the use of the unique identifier by the access point. The access point may enforce different policies against the station depending upon how the station responds to the unique identifier request.
1. A method for an access point to provide one or more features to a station, the method comprising:
receiving a unique identifier query response action frame from the station via a secure connection, wherein the unique identifier query response action frame comprises a response unique identifier configuration, wherein the response unique identifier configuration comprises a response unique identifier type length, a response unique identifier type, or both;
comparing a unique identifier configuration associated with the access point with the response unique identifier configuration, wherein the unique identifier configuration comprises one or more unique identifier types, one or more unique identifier type lengths associated with the one or more unique identifier types, or both;
determining an authorization of the station based on the comparison; and
providing access to the one or more features to the station based on the authorization.
2. The method of claim 1 , further comprising:
advertising an informational element, wherein the informational element comprises the unique identifier configuration.
3. The method of claim 2 , wherein the informational element is unsolicited.
4. The method of claim 1 , further comprising:
wherein the station is associated with the access point; and
sending a unique identifier request action frame to the station, wherein the unique identifier request action frame comprises a request that the station respond with a unique identifier that is to be used by the access point for the station, and wherein the unique identifier request action frame comprises the unique identifier configuration supported by the access point.
5. The method of claim 1 , wherein the one or more unique identifier types comprise any of a text-based type unique identifier, a hash-based type unique identifier, a certificate-based type unique identifier, or any combination thereof.
6. The method of claim 1 , further comprising:
flagging the station as supporting at least one of the one or more unique identifier types.
7. The method of claim 1 , wherein the comparing comprises determining that the response unique identifier type matches at least one of the one or more unique identifier types, determining that the response unique identifier type length matches at least one of the one or more unique identifier type lengths, or both.
8. An access point for providing access to one or more features to a station, the access point comprising:
a memory storing one or more computer-readable instructions; and
a processor configured to execute the one or more computer-readable instructions to:
receive a unique identifier query response action frame from the station via a secure connection, wherein the unique identifier query response action frame comprises a response unique identifier configuration, wherein the response unique identifier configuration comprises a response unique identifier type length, a response unique identifier type, or both;
compare a unique identifier configuration associated with the access point with the response unique identifier configuration, wherein the unique identifier configuration comprises one or more unique identifier types, one or more unique identifier type lengths associated with the one or more unique identifier types, or both;
determine an authorization of the station based on the comparison; and
provide access to the one or more features to the station based on the authorization.
9. The access point of claim 8 , wherein the processor is further configured to execute the one or more computer-readable instructions to:
advertise an informational element, wherein the informational element comprises the unique identifier configuration.
10. The access point of claim 9 , wherein the informational element is unsolicited.
11. The access point of claim 8 , wherein the processor is further configured to execute the one or more computer-readable instructions to:
wherein the station is associated with the access point; and
send a unique identifier request action frame to the station, wherein the unique identifier request action frame comprises a request that the station respond with a unique identifier that is to be used by the access point for the station, and wherein the unique identifier request action frame comprises the unique identifier configuration supported by the access point.
12. The access point of claim 8 , wherein the one or more unique identifier types comprise any of a text-based type unique identifier, a hash-based type unique identifier, a certificate-based type unique identifier, or any combination thereof.
13. The access point of claim 1 , wherein the processor is further configured to execute the one or more computer-readable instructions to:
flag the station as supporting at least one of the one or more unique identifier types.
14. The access point of claim 12 , wherein the comparing comprises determining that the response unique identifier type matches at least one of the one or more unique identifier types, determining that the response unique identifier type length matches at least one of the one or more unique identifier type lengths, or both.
15. A non-transitory computer-readable medium of an access point storing one or more computer-readable instructions for providing access to one or more features to a station, the one or more computer-readable instructions that when executed by a processor of the access point cause the access point to perform one or more operations comprising:
receiving a unique identifier query response action frame from the station via a secure connection, wherein the unique identifier query response action frame comprises a response unique identifier configuration, wherein the response unique identifier configuration comprises a response unique identifier type length, a response unique identifier type, or both;
comparing a unique identifier configuration associated with the access point with the response unique identifier configuration, wherein the unique identifier configuration comprises one or more unique identifier types, one or more unique identifier type lengths associated with the one or more unique identifier types, or both;
determining an authorization of the station based on the comparison; and
providing access to the one or more features to the station based on the authorization.
16. The non-transitory computer-readable medium of claim 15 , wherein the one or more computer-readable instructions when executed by the processor further cause the access point to perform one or more further operations comprising:
advertising an informational element, wherein the unique identifier request action frame comprises the unique identifier configuration.
17. The non-transitory computer-readable medium of claim 15 , wherein the informational element is unsolicited.
18. The non-transitory computer-readable medium of claim 16 , wherein the one or more computer-readable instructions when executed by the processor further cause the access point to perform one or more further operations comprising:
wherein the station is associated with the access point; and
sending a unique identifier request action frame to the station, wherein the unique identifier request action frame comprises a request that the station respond with a unique identifier that is to be used by the access point for the station, and wherein the unique identifier request action frame comprises the unique identifier configuration supported by the access point.
19. The non-transitory computer-readable medium of claim 15 , wherein the one or more computer-readable instructions when executed by the processor further cause the access point to perform one or more further operations comprising:
flagging the station as supporting at least one of the one or more unique identifier types.
20. The non-transitory computer-readable medium of claim 15 , wherein the comparing comprises determining that the response unique identifier type matches at least one of the one or more unique identifier types, determining that the response unique identifier type length matches at least one of the one or more unique identifier type lengths, or both.
21. A method for a station to provide a response unique identifier configuration to an access point, the method comprising:
receiving a unique identifier configuration associated with the access point, wherein the unique identifier configuration comprises one or more unique identifier types, one or more unique identifier type lengths associated with the one or more unique identifier types, or both;
configuring a unique identifier query response action frame based on the unique identifier configuration, wherein the unique identifier query response action frame comprises a response unique identifier configuration, wherein the response unique identifier configuration comprises a response unique identifier type length, a response unique identifier type, or both; and
providing a unique identifier query response action frame to the access point via a secure connection so as to obtain access to one or more features associated with the access point, wherein the unique identifier query response action frame comprises the response unique identifier configuration, and wherein the response unique identifier configuration comprises a response unique identifier type, a response unique identifier type length, or both.
22. The method of claim 21 , wherein receiving the unique identifier configuration comprises:
receiving an informational element from the access point, wherein the informational element comprises the unique identifier configuration.
23. The method of claim 22 , wherein the informational element is unsolicited.
24. The method of claim 22 , further comprising:
establishing a pre-association security (PASN) context.
25. The method of claim 21 , further comprising:
associating with the access point; and
receiving a unique identifier request action frame from the access point, wherein the unique identifier request action frame comprises a request that the station respond with a unique identifier that is to be used by the access point for the station, and wherein the unique identifier request action frame comprises the unique identifier configuration supported by the access point.
26. The method of claim 21 , wherein the one or more unique identifier types comprise any of a text-based type unique identifier, a hash-based type unique identifier, a certificate-based type unique identifier, or any combination thereof.
27. The method of claim 1 , further comprising:
wherein the unique identifier query response action frame comprises a unique identifier; and
accessing the one or more features based on any of the unique identifier, the response unique identifier type, the response unique identifier length, or any combination thereof.
28. A station for providing a response unique identifier configuration to an access point, the station comprising:
a memory storing one or more computer-readable instructions; and
a processor configured to execute the one or more computer-readable instructions to:
receive a unique identifier configuration associated with the access point, wherein the unique identifier configuration comprises one or more unique identifier types, one or more unique identifier type lengths associated with the one or more unique identifier types, or both;
configure a unique identifier query response action frame based on the unique identifier configuration, wherein the unique identifier query response action frame comprises a response unique identifier configuration, wherein the response unique identifier configuration comprises a response unique identifier type length, a response unique identifier type, or both; and
provide a unique identifier query response action frame to the access point via a secure connection so as to obtain access to one or more features associated with the access point, wherein the unique identifier query response action frame comprises the response unique identifier configuration, and wherein the response unique identifier configuration comprises a response unique identifier type, a response unique identifier type length, or both.
29. The station of claim 28 , wherein receiving the unique identifier configuration comprises:
receiving an informational element from the access point, wherein the informational element comprises the unique identifier configuration.
30. The station of claim 29 , wherein the informational element is unsolicited.
31. The station of claim 29 , wherein the processor is further configured to execute the one or more computer-readable instructions to:
establish a pre-association security (PASN) context.
32. The station of claim 28 , wherein the processor is further configured to execute the one or more computer-readable instructions to:
associate with the access point; and
receive a unique identifier request action frame from the access point, wherein the unique identifier request action frame comprises a request that the station respond with a unique identifier that is to be used by the access point for the station, and wherein the unique identifier request action frame comprises the unique identifier configuration supported by the access point.
33. The station of claim 28 , wherein the one or more unique identifier types comprise any of a text-based type unique identifier, a hash-based type unique identifier, a certificate-based type unique identifier, or any combination thereof.
34. The station of claim 28 , wherein the processor is further configured to execute the one or more computer-readable instructions to:
wherein the unique identifier query response action frame comprises a unique identifier; and
accessing the one or more features based on any of the unique identifier, the response unique identifier type, the response unique identifier length, or any combination thereof.
35. A non-transitory computer-readable medium of a station storing one or more computer-readable instructions for providing a response unique identifier configuration to an access point, the one or more computer-readable instructions that when executed by a processor of the station cause the station to perform one or more operations comprising:
receiving a unique identifier configuration associated with the access point, wherein the unique identifier configuration comprises one or more unique identifier types, one or more unique identifier type lengths associated with the one or more unique identifier types, or both;
configuring a unique identifier query response action frame based on the unique identifier configuration, wherein the unique identifier query response action frame comprises a response unique identifier configuration, wherein the response unique identifier configuration comprises a response unique identifier type length, a response unique identifier type, or both; and
providing a unique identifier query response action frame to the access point via a secure connection so as to obtain access to one or more features associated with the access point, wherein the unique identifier query response action frame comprises the response unique identifier configuration, and wherein the response unique identifier configuration comprises a response unique identifier type, a response unique identifier type length, or both.
36. The method of claim 35 , wherein receiving the unique identifier configuration comprises:
receiving an informational element from the access point, wherein the informational element comprises the unique identifier configuration.
37. The method of claim 36 , wherein the one or more computer-readable instructions when executed by the processor further cause the access point to perform one or more further operations comprising:
establishing a pre-association security (PASN) context.
38. The method of claim 35 , wherein the one or more computer-readable instructions when executed by the processor further cause the access point to perform one or more further operations comprising:
associating with the access point; and
receiving a unique identifier request action frame from the access point, wherein the unique identifier request action frame comprises a request that the station respond with a unique identifier that is to be used by the access point for the station, and wherein the unique identifier request action frame comprises the unique identifier configuration supported by the access point.
39. The method of claim 35 , wherein the one or more unique identifier types comprise any of a text-based type unique identifier, a hash-based type unique identifier, a certificate-based type unique identifier, or any combination thereof.
40. The method of claim 35 , wherein the one or more computer-readable instructions when executed by the processor further cause the access point to perform one or more further operations comprising:
wherein the unique identifier query response action frame comprises a unique identifier; and
accessing the one or more features based on any of the unique identifier, the response unique identifier type, the response unique identifier length, or any combination thereof.