Intel Corporation

Eci Telecom Ltd.

Intel IP Corporation

Intel Corporation and Intel IP Corporation

Ido Ouzieli

Po-Kai Huang

Robert J Stacey

Laurent Cariou

Daniel F Bravo

Danny Alexander

Emily H Qi

Arik Klein

Johannes Berg

Ehud Reshef

Danny Ben-Ari

Cheng Chen

Ofer Hareuveni

Nir Yizhak Balaban

Amir Hitron

Chittabrata Ghosh

Assi Jakoby

Avner Epstein

Stanislav Gens

Qinghua Li

Carlos Cordeiro

Thomas J Kenney

Xiaogang Chen

Feng Jiang

Jonathan Segev

Necati Canpolat

Noam Ginsburg

Bruno Jechoux

Izoslav Tchigevsky

Dongsheng Bi

Ofer Schreiber

Hassan Yaghoobi

Benny Abramovsky

Keren Dor

Ilan Peer

Shahrnaz Azizi

Nasser A Kurd

Oren Kaidar

Dong-Ho Han

Itzik Shahar

Zhongsheng Wang

Eran Segev

Ana M Yepes

Dor Chay

Preston Joel Hunt

Arik Gihon

Tomer Levy

Yevgeni Sabin

Leor Rom

John Fallin

Shahar Michaelovich

Hagay Barel

Michael Shusterman

Amit Zeevi

Liat Kahana

Ignacio Gimeno

Ross Rony

Maor Tal

Roi Fridburg

The application relates to a 4-way handshake optimization. An initiating entity includes processor circuitry configured to: transmit a first open authentication frame to a responding entity via a wireless interface, wherein the first open authentication frame comprises information that helps the responding entity to identify a Pairwise Master Key (PMK) and a first random number; receive a second open authentication frame from the responding entity, wherein the second open authentication frame comprises a second random number; transmit an association request frame to the responding entity via the wireless interface, wherein the association request frame is encrypted with at least part of a Pairwise Transient Key (PTK) derived by the initiating entity from the PMK; and receive an association response frame from the responding entity, wherein the association response frame is encrypted with at least part of the PTK derived by the responding entity from the PMK.

4-way handshake optimization

The disclosure provides a method for resisting downgrade attack for private limited connection, comprising: performing a 4-way handshake between an initiating entity and a responding entity to establish a PMKSA; receiving, by the initiating entity, a frame from the responding entity during the 4-way handshake, wherein the frame comprises an indication of usage of private limited connection for all responding entities in a network identified by a SSID of the responding entity; and establishing, by the initiating entity, a private limited connection in the network identified by the SSID of the responding entity.

Method and apparatus for resisting downgrade attack for private limited connection

This disclosure describes systems, methods, and devices related to security for multi-link operations. A multi-link device (MLD) may establish a first communication link between a first device of the MLD and a first device of a second MLD, and a second communication link between a second device of the MLD and a second device of the second MLD. The MLD may generate a group-addressed message. The MLD may protect the group-addressed message using a first key or a first integrity key. The MLD may protect the group-addressed message using a second key or a second integrity key. The MLD may send, using the first communication link, the group-addressed message protected using the first key or the first integrity key, and may send, using the second communication link, the group-addressed message protected using the second key or the second integrity key.

Enhanced security for multi-link wireless operations

This disclosure describes systems, methods, and devices related to power spectral density (PSD) limit. A device may generate a frame comprising one or more elements to be sent to a first station device, wherein the frame is to be sent using a 6 GHz band. The device may include in the frame, information associated with a PSD limit on a per bandwidth size basis of the 6 GHz band. The device may cause to send the frame to the first station device.

Power spectral density limit for 6 GHz

Provided herein are apparatus and methods for Wi-Fi network profile verification. An apparatus for a wireless communication device includes: a memory; and processor circuitry coupled with the memory, wherein the processor circuitry is to: encode a verification sequence in a probe request for transmission to an AP; decode, in response to the probe request, a probe response received from the AP to obtain a first verification result; determine a second verification result based on the verification sequence and a verification password (VP) obtained from the AP; and determine whether a verification for the AP is successful or not based on the first verification result and the second verification result, and wherein the memory is to store the VP. Other embodiments may also be disclosed and claimed.

Apparatus and method for Wi-Fi network profile verification

This disclosure describes systems, methods, and devices related to operating channel validation. A device may associate with an access point (AP). The device may establish a first operating channel to communicate with the AP. The device may identify a protected beacon frame received from the AP, wherein the protected beacon frame comprises an indication of a second operating channel. The device may extract the second operating channel from the protected beacon frame. The device may determine an association status with the AP based on the first operating channel and the second operating channel.

Operating channel validation under protected beacon

Multi-link device (MLD) security association (SA) query and query response procedures are described. Any of the links between an access point (AP) MLD and a non-AP MLD may be used to initiate association, reassociation, or disassociation procedures using the SA query requests and responses. The SA query request or response from one of the stations (STAs) associated with the MLD is sent to a corresponding linked one of the STAs associated with the other MLD. The SA request or response is addressed to the other MLD rather than the STA of the other MLD. Retry timeouts and maximum timeouts for resending SA query requests are set by the AP MLD and the same across each of the links.

Multi-link device security association query

This disclosure describes systems, methods, and devices related to enhanced frame exchange. A device may generate a first subset of a plurality of fields, wherein the first subset is mandatory in a probe request frame. The device may generate a second subset of the plurality of fields, wherein the second subset is optional in the probe request frame regardless of capability information of the device. The device may generate the probe request frame comprising the first subset and the second subset. The device may cause to send the probe request frame to an access point (AP) device.

Enhanced frame exchange and multi-link device messaging for secure communications

Methods, apparatuses, and computer readable media for communicating elements between multi-link devices are disclosed. Apparatuses of a first station (STA) affiliated with a multi-link device (MLD) are disclosed, where the apparatuses comprise processing circuitry configured to determine a sequence number as a next sequence number of a sequence number space where the sequence number space is indexed by a MLD media access control (MAC) address of a second MLD, and wherein the processing circuitry is further configured to encode a media access control (MAC) management protocol data unit (MMPDU) in a physical layer (PHY) protocol data unit (PPDU), the MMDPU including the sequence number, a frame body, and an address 1 field, the address 1 field indicating an address of a second station (STA) affiliated with the second MLD, and configure the first STA to transmit the PPDU to the second station.

Multi-link frame delivery

Methods, apparatuses, and computer readable media for communicating elements between multi-link devices are disclosed. Apparatuses of a first access points (AP) of an AP multi-link device (MLD) are disclosed, where the apparatuses comprise processing circuitry configured to encode a first portion of a first beacon frame or first response frame, and in response to a second AP of the AP MLD transmitting, on a second frequency band, a second beacon frame or a second probe response frame comprising a channel switch announcement element or an enhanced channel switch announcement frame, encoding a second portion of the first beacon frame or the first probe response frame, the second portion comprising the channel switch announcement element or the enhanced channel switch announcement frame. The processing circuitry is further configured to configure the first AP of the AP MLD to transmit, on a first frequency band, the first beacon frame.

Communicating elements between multi-link devices

A non-AP STA of a multi-link device (STA MLD) may be configured to encode a multi-link (ML) probe request frame for transmission to an access point STA (AP) of an AP MLD comprising a plurality of affiliated APs. When the probe request frame is sent outside the context of active scanning, to discover an AP of the AP MLD the ML probe request frame may be encoded to have an Address 1 field set to a broadcast address and an Address 3 field set to a BSSID of the AP, or encoded to have the Address 1 field set to a basic service set identity (BSSID) of the AP's BS. The non-AP STA may refrain from transmitting the ML probe request frame to the AP of the AP MLD in a corresponding link when another non-AP STA of the AP MLD has already received a ML probe response that included complete information from any one of the APs of the AP MLD in any link.

Restrictions on multi-link device probe request

This disclosure describes systems, methods, and devices related to using protected beacon frames in wireless communications. A device may determine a beacon management element of a beacon frame body and may determine an integrity group key identifier of the beacon management element, wherein the integrity group key identifier is associated with a basic service set (BSS). The device may determine, based on the integrity group key identifier, a management integrity check (MIC) field of the beacon management element. The device may generate a beacon frame including the beacon frame body. The device may send the beacon frame.

Enhanced beacon frames in wireless communications

Multi-link device (MLD) devices and transitions are described. The MAC addresses of the AP MLD and non-AP MLD are used to generate keys for different fast transitions (FT) between a non-AP MLD and an AP MLD. In an FT initial mobility domain operation, the AP MLD MAC address is used as the R1KH-ID and the non-AP MLD MAC address is used as the S0KH-ID and S1KH-ID. The MAC addresses are exchanged in Authentication Request/Response or Association Request/Response messages and the GTK/IGTK/BIGTK are delivered in a single FT 4-way handshake. In a fast MLD transition to an AP MLD in the same ESS, the other AP MLD MAC address is used as the R1KH-ID and the non-AP MLD MAC address is used as the S1KH-ID. The MAC addresses are exchanged in Authentication Request/Response or Association Request/Response messages and the GTK/IGTK/BIGTK are delivered in an FTE.

Multi-link device re-setup and transition

Growing community of inventors

Tel Aviv, Israel

Ido Ouzieli