Systems, methods, and devices for association and authentication for multi access point coordination
A method for associating and authenticating a station (STA) with a coordinated access point (AP) group may include generating a pairwise master key (PMK) between the STA and a coordinator of the coordinated AP group, and maintaining an association and authentication state between the STA and the coordinated AP group based on the PMK. The method may further include generating one or more temporal keys between the STA and the coordinator based on the PMK. The method may further include distributing the PMK from the coordinator to a first member AP and a second member AP of the coordinated AP group. The method may further include generating a first temporal key between the STA and the first member AP, and generating a second temporal key between the STA and the second member AP.
1. A method for associating and authenticating a station (STA) with a coordinated access point (AP) group, the method comprising:
performing, by a coordinator, coordinator-level authentication with the coordinated AP group to enable a joint transmission from a first member AP and a second member AP of the coordinated AP group;
performing, by the coordinator, encryption and decryption for the coordinated AP group, and the first member AP or the second member AP of the coordinated AP group serves as a relay to forward data between the STA and the coordinator;
generating, by the coordinator, a coordinator level pairwise master key (PMK-Coordinator) between the STA and the coordinator of the coordinated AP group;
generating a Pairwise Transient Key (PTK) and a Group Temporal Key (GTK) between the STA and the coordinator using the PMK-Coordinator; and
maintaining an association and authentication state between the STA and the coordinated AP group based on the PMK-coordinator.
2. The method of claim 1 , further comprising performing a handshake between the STA and the coordinator through the member AP of the coordinated AP group.
3. The method of claim 1 , further comprising performing joint transmissions between the STA and the first and the second member AP of the coordinated AP group.
4. The method of claim 1 , further comprising performing a four-way handshake in which the PTK and GTK are generated.
5. The method of claim 4 ,
wherein the four-way handshake results in unlocking a controlled port.
6. The method of claim 5 , wherein:
the PTK and GTK are used for encrypted data transfers.
7. The method of claim 1 , wherein the coordinated AP group is advertised in one or more of a beacon, a probe response, or an association response.
8. The method of claim 1 , further comprising:
sending an association request from the STA to the coordinated AP group through the member AP of the coordinated AP group; and
sending an association response from the coordinated AP group to the STA through the member AP, wherein the association response indicates a mode for authenticating the STA with the coordinated AP group.
9. The method of claim 8 , wherein the association response comprises a coordinator key holder identifier (ID).
10. The method of claim 1 , further comprising dynamically selecting at least one anchor AP for the STA from one or more member APs in the coordinated AP group.
11. The method of claim 1 , wherein the STA and the coordinated access point (AP) group comprise a virtual basic service set (V-BSS).
12. The method of claim 11 , wherein the V-BSS is advertised using a V-BSS information element (VBIE) in a beacon frame.
13. A system comprising:
a coordinated access point (AP) group comprising a first member AP and a second member AP;
a wireless station (STA);
a coordinator configured to:
perform coordinator-level authentication with the coordinated AP group to enable a joint transmission from the first member AP and the second member AP of the coordinated AP group;
perform encryption and decryption for the coordinated AP group, and the first member AP or the second member AP of the coordinated AP group serves as a relay to forward data between the STA and the coordinator;
generate a coordinator level pairwise master key (PMK-Coordinator) between the STA and the coordinator of the coordinated AP group;
generate a Pairwise Transient Key (PTK) and a Group Temporal Key (GTK) between the STA and the coordinator using the PMK-Coordinator; and
maintain an association and authentication state between the STA and the coordinated AP group based on the PMK-coordinator.
14. A memory storing instructions for associating and authenticating a station (STA) with a coordinated access point (AP) group, the instructions which when executed by at least one processor, cause the at least one processor of a coordinator to:
perform coordinator-level authentication with the coordinated AP group to enable a joint transmission from a first member AP and a second member AP of the coordinated AP group;
perform encryption and decryption for the coordinated AP group, and the first member AP or the second member AP of the coordinated AP group serves as a relay to forward data between the STA and the coordinator;
generate a coordinator level pairwise master key (PMK-Coordinator) between the STA and the coordinator of the coordinated AP group;
generate a Pairwise Transient Key (PTK) and a Group Temporal Key (GTK) between the STA and the coordinator using the PMK-Coordinator; and
maintain an association and authentication state between the STA and the coordinated AP group based on the PMK-coordinator.