Patent ID: 8750521
Filing Date: 2014-06-10
Classification: G06F,H04L,H04W

Abstract:
1. A method for switching a station in a Wireless local area network Privacy Infrastructure, WPI, performed by wireless terminal points in a converged Wireless Local Area Network, WLAN, wherein before the switching, the station is associated with one access controller through one wireless terminal point, after the switching, the station is associated with another one access controller through another one wireless terminal, the one access controller is referred to as an associated access controller, the another one access controller is referred to as a destination access controller, the one wireless terminal point is referred to as an associated wireless terminal point, the another one wireless terminal point is referred to as a destination wireless terminal point, and the method comprises: re-associating the station with the destination access controller through the destination wireless terminal point; the destination access controller requesting the associated access controller for a base key; the associated access controller instructing the associated wireless terminal point to delete the station; the destination access controller instructing the destination wireless terminal point to add the station; the station and the destination access controller negotiating about a session key based upon the requested base key; and synchronizing the session key between the destination access controller and the destination wireless terminal point; wherein the destination access controller requesting the associated access controller for a base key comprises: the destination access controller transmitting base key request information comprising station deletion information to the associated access controller on a secure channel pre-established with the associated access controller; and the associated access controller transmitting a base key to the destination access controller, in response to the base key request information of the destination access controller, on the secure channel with the destination access controller, wherein the transmitted base key is equivalent to a base key between the station and the associated access controller or calculated from extension parameters in a unidirectional function using the base key between the station and the associated access controller, and the extension parameters are parameters known in advance to the station and the destination access controller.