CN1852330A - Virtual terminal temporary media access control address dynamic altering method - Google Patents

Abstract

The invention discloses a method for dynamically changing the temporary media access control address of a virtual terminal. A temporary media access control address manager is arranged on the network side access point of the wireless local area network, which includes the steps of: Before the time-to-live of the address arrives, the temporary media access control address manager allocates a new temporary media access control address and sends it to the virtual terminal device, which contains at least the real media access control address of the terminal device, corresponding virtual terminal device instance number and the new temporary media access control address; after the virtual terminal device receives the new temporary media access control address, it starts the time-to-live of the new temporary media access control address, and sends The temporary MAC address manager sends an acknowledgment message. The method of the invention realizes the safe transmission of information of the wireless local area network through the update process of the temporary MAC address.

Description

Method for Dynamically Changing Temporary Media Access Control Address of Virtual Terminal

technical field

The invention relates to a wireless local area network technology, in particular to a method for dynamically changing the temporary MAC address of a virtual terminal in the wireless local area network.

Background technique

The WLAN (Wireless Local Area Network) technology of the prior art is popular in the market because of its wireless characteristics, high-speed access comparable to wired, and low price. It has begun to replace wired LANs and is widely used in homes, campuses, Hotels, corporate offices and other occasions have begun to be widely deployed in public hotspots as a wireless broadband access technology, providing the public with wireless broadband data access services.

Existing ISO/IEC 8802-11: 1999 "Specific requirements for telecommunication and information exchange between information technology systems Local area network and metropolitan area network Part 11: Wireless LAN Media Access Control (MAC, MediaAccess Control address is the identification of a local area network node) and Physical Layer (PHY) Specification" is an international standard for WLAN, and its content corresponds to IEEE 802.11.

China has also issued the WLAN national standard GB/T 15629.11-2003, the main difference between which and the international standard lies in the security mechanism of access control. In fact, the WLAN products widely used in the market are mainly supplementary specifications for IEEE 802.11 issued by the IEEE 802.11 standard project group, including IEEE 802.11b, IEEE 802.11g, IEEE 802.11a, etc. Among them, 802.11b and 802.11g work in the 2.4Hz frequency band, and 802.11a work in the 5GHz frequency band. The physical layer rate supported by 802.11b can reach 11Mb/s, and the physical layer rate supported by 802.11g and 802.11a can reach 54Mb/s. At present, IEEE 802.11 is formulating a standard 802.11n that supports higher throughput to better support various real-time services and multimedia applications and increase system capacity.

The basic structure of the existing WLAN system defined by IEEE 802.11 is shown in Figure 1. Among them, STA (Station) refers to a terminal device that includes an IEEE 802.11 wireless LAN interface. Currently, many mobile phones on the market support wireless LAN interfaces. A wireless LAN interface is built in. For some devices without a wireless LAN interface, a WLAN wireless network card can be installed to provide a wireless LAN interface.

The AP (Access Point) shown in Figure 1 is the access point, which is equivalent to the base station of the mobile network. Its main function is to enable the STA to communicate with other STAs or related devices of the wired network, for example: multiple STAs access An AP forms a wireless local area network for communication, STAs connected to different APs form a local area network for communication, and STAs communicate with related devices of a wired LAN, etc. STAs associated to an AP constitute a Basic Service Set (BSS).

DS (Distribution System) is a distribution system, which enables a large LAN to be formed between different BSSs, and between BSSs and wired LANs. The portal refers to a logical point that provides forwarding of MAC Service Data Units (MSDUs) between the DS and the wired LAN.

In the WLAN system, SSID (Service Set Identifier) is used to distinguish different wireless local area networks. When different BSSs (identified by BSSID) form a large LAN through DS, they have the same SSID.

The working principle of 802.11 in the prior art is shown in FIG. 2 , which is a passive scanning process, and the AP periodically sends broadcast frames (Beacon frames or beacon frames) on its working channel. When the STA is in the passive scanning mode, it first listens to the broadcast frame, and selects a candidate AP for access according to the management information it carries. The STA can also use an active scanning method instead of passive scanning, that is, the STA sends a Probe Request (probe request) on the corresponding channel, and the AP working on the channel returns a Probe Response (probe response), carrying the same or more than the Beacon Information.

Through scanning, STA can obtain relevant system information, including physical layer and media access control (MAC) layer related parameters and capability support, such as security parameters RSN IE (Robust Security Network Information Element).

When the STA determines to join the corresponding BSS, an 802.11 authentication process will be performed between the STA and the AP. Currently supports two types of authentication: shared key authentication (Shared Key Authentication) and open system authentication (Open System authentication). Shared key authentication assumes that the STA and AP have a common key, and the encryption algorithm uses WEP (Wireless Equivalent Privacy). Open system authentication does not contain any encryption algorithm, which means the system is open. 802.11i is a security enhancement for 802.11. It directly adopts the port control mechanism of 802.1X. For 802.11, an association between STA and AP corresponds to the port of 802.1X. In the 802.11 authentication phase, 802.11i uses open system authentication. In principle, China's WAPI security standard is also similar to 802.11i, but the required authentication method and encryption algorithm are different.

After the 802.11 authentication process is completed, the association between the STA and the AP is established. First, the STA sends an association request, which contains relevant security parameters (such as RSN IE). The AP responds with an association response and assigns an association ID (Association ID) to the association. For the RSN, the 802.1X control port corresponding to the association will be closed until the 802.1X key negotiation and installation are completed.

The access authentication process after association is the 802.1X/EAP access authentication process for the RSN. The UAM (Universal Access Method) recommended by Wi-Fi Alliance is another access authentication method based on browser hijacking, that is, the system forces STAs to connect to a page as a window for users to enter user name and password information. The AS performs information exchange, but currently the UAM does not support 802.11i.

An example of the dynamic update requirement of the temporary MAC address of the terminal device is as follows: For example, when a STA has multiple service provider identities (for example, some mobile phones can support multiple SIM cards), voice services can be obtained from one service provider and Obtain data services from another service provider. If a STA can be externally connected to multiple independent terminals of other types, WLAN access services can also be obtained by sharing the STA. Then it is necessary to provide a virtual STA implementation mechanism to support the initiation of multiple identity-independent access authentication processes on a physical STA and to distinguish their independent service flows. In the virtual STA model shown in Figure 3, a STA can Create one or more virtual STAs according to business needs, such as V-STA1 and V-STA2 shown in Figure 3, so as to support one or more independent service flows. Each virtual STA on each physical STA corresponds to an independent temporary MAC address (T-MAC-ADDR). The establishment process of the virtual STA is shown in Figure 4, which has been applied for protection in the applicant's separate patent application. The description of the above technical content is for the convenience of understanding the technical solution of the present invention, and the content of patent applications that may be filed at the same time as the present invention is related to the technical solution of the present invention.

After the virtual terminal is established, the temporary MAC address of the prior art cannot be dynamically refreshed, and because the wireless LAN network is characterized by coverage signals within a certain range, it is easy to be attacked, so the temporary MAC address of the virtual terminal device will be changed from empty MAC address tracking and spoofing are carried out in the mouth, and attacks on the wireless LAN network system are carried out accordingly after the spoofing, causing security damage. Therefore prior art still needs to improve and develop.

Contents of the invention

The purpose of the present invention is to provide a method for updating a temporary MAC address (T-MAC-ADDR) in a wireless local area network, so as to realize a method for dynamically updating a protected temporary MAC address and improve security.

To achieve the above object, technical solutions of the present invention include:

A method for dynamically changing the temporary media access control address of a virtual terminal in a wireless local area network, wherein a temporary media access control address manager is provided on an access point on the network side of the wireless local area network, which includes the following steps:

A. Before the lifetime of the temporary media access control address arrives, the temporary media access control address manager allocates a new temporary media access control address and sends it to the virtual terminal device, which at least carries the terminal device The real media access control address, the corresponding virtual terminal device instance number and the new temporary media access control address;

B. After receiving the new temporary media access control address, the virtual terminal device starts the time-to-live of the new temporary media access control address, and sends confirmation information to the temporary media access control address manager.

The method, wherein, when the method is initiated by the virtual terminal device, it also includes the following steps:

A1. The virtual terminal device sends a temporary media access control address update request to the temporary media access control address manager, and carries the instance number of the corresponding virtual terminal device requesting to update the temporary address, starts a timer, and waits for the temporary media access control address update response;

B1. The temporary media access control address manager identifies the update operation with the media access control address in use of the virtual terminal device and the instance number of the virtual terminal device. If the timer expires, the corresponding temporary Media access control address update response, then resend the temporary media access control address update request for a predetermined number of times, if still unable to receive the new temporary media access control address, then the virtual terminal device continues to use the old temporary media access control address .

The method, wherein, the step A also includes:

A11. The access point receives the temporary media access control address update request sent by the virtual terminal device, that is, encapsulates and forwards it to the temporary media access control address manager;

A12. The temporary media access control address manager encapsulates and responds the generated new temporary media access control address to the access point, and starts the time-to-live;

A13. The access point encapsulates and forwards to the virtual terminal device, which carries parameters of successful update, new temporary media access control address, and time-to-live.

The method, wherein, the step B also includes:

B11. After the virtual terminal device successfully updates the new temporary media access control address, it sends a temporary media access control address update confirmation message to the access point, which carries the old temporary media access control address as a parameter;

B12. The access point receives the temporary media access control address update confirmation information sent by the virtual terminal device, updates the new temporary media access control address corresponding to the virtual terminal device, and sends it to the terminal device in the future The target address of the 802.11 frame is filled with the new temporary media access control address, and a new temporary media access control address update process is initiated until the lifetime ends.

The method described above, wherein, when the access point does not receive the temporary media access control address update confirmation information of the virtual terminal device, it repeats the step A13 for a predetermined number of times, and uses the old temporary media access control address as the target The address sends an 802.11 frame to the virtual terminal device. If the corresponding temporary media access control address update confirmation message still cannot be received, then continue to use the old temporary media access control address, and restart the connection between the virtual terminal and the network side. Time-to-live timer for old ephemeral media access control addresses.

Said method, wherein, said step B also includes that the terminal device retains the corresponding relationship between the new and old temporary media access control addresses and the virtual terminal device instance number for a predetermined period of time, and receives said access point sending When the source address of the incoming 802.11 frame is filled with a new temporary media access control address, clear the correspondence between the old temporary media access control address and the instance number of the virtual terminal device.

The method, wherein, the network side can actively allocate a new temporary media access control address.

The method further includes: after the terminal device side initiates a temporary media access control address update operation request, if the active update information sent by the network side is received, actively stop the temporary media access control address update operation request initiated by this side. A media access control address update process, and respond to the temporary media access control address update process initiated by the network side.

The method further includes: after the network side initiates a temporary media access control address update operation request, if receiving the temporary media access control address update operation request information sent from the terminal device side, not responding to the A temporary media access control address update operation request initiated by the terminal device side.

The method for dynamically changing the temporary MAC address of a virtual terminal provided by the present invention implements the safe transmission of information in the wireless local area network through the updating process of the temporary MAC address in the wireless local area network.

Description of drawings

FIG. 1 is a schematic diagram of a WLAN system defined by IEEE 802.11 in the prior art;

Fig. 2 is the operating principle of the 802.11 network system of the prior art, which shows the flowchart of passive scanning;

FIG. 3 is a schematic diagram of a system in which a virtual terminal device in the prior art is connected to a wireless local area network;

FIG. 4 is a schematic flow diagram of establishing a virtual terminal device in the prior art;

Fig. 5 is a schematic diagram of the network structure of the temporary MAC address manager of the present invention;

6 is a schematic diagram of a temporary MAC address update process initiated by a virtual STA according to the method of the present invention;

7 is a schematic diagram of a temporary MAC address update process initiated by the network side of the method of the present invention;

Fig. 8 is a schematic flow diagram of the temporary MAC address update failure initiated by the virtual STA side of the method of the present invention;

FIG. 9 is a schematic flow diagram of a failure to update a temporary MAC address initiated by the network side in the method of the present invention.

Detailed ways

Various preferred embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

The present invention relates to a method for dynamically changing the temporary MAC address of a virtual terminal in a wireless local area network. As shown in FIG. WLAN, used to uniformly manage temporary MAC addresses used by virtual terminals in a WLAN. Logically, the temporary MAC address manager is an independent functional entity relative to the AP functional entity, and helps the DS realize the temporary MAC address management function.

The data packets from the STA are sent to the DS via the AP or the data packets from the DS to the STA via the AP use the real address of the STA in the DS, and the temporary address of the STA is only used to identify the protected STA on the air interface. It is used between AP and STA to replace the real MAC address. Its scope of action is only within the WLAN network. It is used within the WLAN network and will not be transmitted to external networks and clients.

The temporary MAC address (T-MAC-ADDR) updating method of the present invention, as shown in Fig. 6-Fig. , which is a dynamic update. The temporary MAC address update process is shown in Figure 6 and Figure 7. The update strategy is divided into two cases initiated by the virtual STA side or the network side:

1. The update that virtual STA side initiates, as shown in Figure 6, comprises the following steps:

a) at a certain time before the lifetime of the temporary MAC address arrives, for example, when the lifetime exceeds 50%, the virtual STA sends a temporary MAC address update request (TMA-UPDATE.request) to the temporary MAC address manager, It carries the corresponding virtual STA instance number requesting to update the temporary address, and starts the timer _TR to wait for the temporary MAC address update response (TMA-UPDATE.response). The network side identifies this update operation by the MAC address in use of the virtual STA and the instance number of the virtual STA. If the timer T _R expires and still does not receive the temporary MAC address update response, it will resend the temporary MAC address update request. response, the update operation is unsuccessful, and the virtual STA continues to use the original temporary MAC address, as shown in FIG. 8 .

b) After the AP receives the temporary MAC address update request sent by the virtual STA, it encapsulates a "temporary MAC address update operation request" and sends it to the temporary MAC address manager, which contains the real MAC address of the STA and the corresponding virtual STA instance Number.

c) The temporary MAC address manager allocates a new temporary MAC address, then encapsulates the success of the update, the temporary MAC address and the lifetime in the "temporary MAC address update operation response" to the AP, and starts the lifetime timing.

d) The AP will encapsulate a "temporary MAC address update response" and return it to the corresponding STA, which carries parameters such as update success, new temporary MAC address, and lifetime.

e) The virtual STA updates the new temporary MAC address, that is, the source address of the 802.11 frame sent to the AP in the future fills in the new temporary MAC address, and then sends a "temporary MAC address update confirmation" (TMA- UPDATE.confirm), which carries the old temporary MAC address as a parameter. At the same time, the STA also retains the corresponding relationship between the new and old temporary MAC addresses and virtual instance numbers for a period of time. When the source address of the 802.11 frame sent by the AP is filled with the new temporary MAC address, the old temporary MAC address will be cleared. The corresponding relationship between the address and the virtual instance number ensures the smoothness of the communication with the AP when the new and old temporary MAC addresses are replaced.

f) After receiving the "Temporary MAC Address Update Confirmation" sent by the virtual STA, the AP will also update the new temporary MAC address corresponding to the virtual STA, that is, fill in the new destination address of the 802.11 frames sent to the STA in the future The temporary MAC address will initiate a new address update until the time-to-live expires.

g) If the AP does not receive the "Temporary MAC Address Update Confirmation" sent by the virtual STA, it will resend the "Temporary MAC Address Update Response". frame to the virtual STA, until the predetermined number of retransmissions does not receive the "temporary MAC address update confirmation" from the virtual STA, the old temporary MAC address will continue to be used. At this time, the virtual STA will send the "Temporary MAC Address Update Confirmation" again. If it receives the 802.11 frame with the old temporary MAC address as the target address sent by the AP three times, it will continue to use the old temporary MAC address. In this case, the AP will notify the temporary MAC address manager to reclaim the previously updated temporary MAC address, and both the virtual STA and the network side will restart the time-to-live of the old temporary MAC address.

h) If the temporary MAC address manager cannot allocate a new temporary MAC address, such as the address is exhausted or the maximum number of available addresses is reached, then the temporary MAC address manager will find the temporary MAC address corresponding to the virtual serial number and start over Its survival time is counted, and then a "temporary MAC address update operation response" is encapsulated, which carries the STA's real MAC address, the corresponding virtual STA instance number and the parameters of the update operation failure to the AP. In this case, the AP returns parameters such as update failure and virtual instance number in the "temporary MAC address update response (TMA-UPDATE.response)" returned to the virtual STA. When the virtual STA receives a temporary MAC address update response with an update failure parameter, it will restart the time-to-live and continue to use the original temporary MAC address.

II. Updates initiated by the network side:

A. At a certain time before the lifetime of the temporary MAC address arrives, the network side actively allocates a new temporary MAC address, and encapsulates a "temporary MAC address update operation request" to the virtual STA, which directly carries the STA's The real MAC address, the corresponding virtual STA instance number and the temporary MAC address that has been newly allocated by the temporary MAC address manager are shown in Figure 7.

B. After receiving the "temporary MAC address update operation request", the virtual STA will update the new temporary MAC address, that is, fill in the new temporary MAC address in the source address of the 802.11 frame sent to the AP in the future, and then send a message to the AP "Temporary MAC address update confirmation" (TMA-UPDATE.confirm), which carries the old temporary MAC address as a parameter. At the same time, the STA also retains the corresponding relationship between the new and old temporary MAC addresses and virtual instance numbers for a period of time. When the source address of the 802.11 frame sent by the AP is filled with the new temporary MAC address, the correspondence between the old temporary MAC address and the virtual instance number will be cleared, so as to ensure smooth communication when the new and old temporary MAC addresses are replaced.

C. The AP receives the "Temporary MAC Address Update Confirmation" sent by the virtual STA, and then updates the new temporary MAC address corresponding to the virtual STA, that is, fills in the new destination address of the 802.11 frames sent to the STA in the future. The temporary MAC address will be updated by the network side until the time-to-live expires.

D. If the AP does not receive the "Temporary MAC Address Update Confirmation" sent by the virtual STA, it will resend the "Temporary MAC Address Update Operation Request" for a predetermined number of times, for example, three times, and still use the old temporary MAC address as the target address Send the 802.11 frame to the virtual, carrying the real MAC address of the STA, the corresponding virtual STA instance number and the temporary MAC address newly allocated by the temporary MAC address manager. If the "Temporary MAC Address Update Confirmation" sent by the virtual STA is not received three times, the old temporary MAC address will continue to be used, as shown in Figure 9. At this time, the virtual STA will send the "Temporary MAC Address Update Confirmation" again. If it receives the 802.11 frame with the old temporary MAC address as the target address sent by the AP three times, it will continue to use the old temporary MAC address. In this case, the AP will notify the temporary MAC address manager to reclaim a new temporary MAC address, and both the STA and the manager restart the time-to-live of the old temporary MAC address.

It should be noted that in the method of the present invention, there is a possibility that the STA and the AP side send "temporary MAC address update operation request" to each other at the same time, so it is stipulated that after the STA side sends out the "temporary MAC address update operation request", if it receives The "temporary MAC address update operation request" sent from the AP side actively stops the temporary MAC address update process initiated by itself (STA side), and only responds to the temporary MAC address update process initiated by the AP side. After the AP side sends out the "temporary MAC address update operation request", if it receives the "temporary MAC address update operation request" sent by the STA side, it will not respond to the temporary MAC address update operation request initiated by the STA side. In this way, it is ensured that the requests initiated by the STA side and the AP side will not conflict.

The RSNA security mechanism (including pre-authentication) and QoS mechanism of the prior art both use the MAC address of the STA as the service identifier, so the temporary MAC address before the handover is still used during the handover process of the virtual STA, and no temporary MAC address is performed. The update of the address and the update after switching follow the process described above according to the survival time.

The update of the temporary MAC address in the method of the present invention only occurs after association, and the protection of Action management frames such as update request and update response can adopt the 802.11w management frame protection mechanism, and the current standard does not provide management frame protection.

The update primitive of the temporary MAC address in the method of the present invention newly defines three 802.11MAC service primitives: TMA-UPDATE.request, for temporary address update request; TMA-UPDATE.response, for temporary MAC address update operation The response result of TMA-UPDATE.confirm, which is used to confirm the temporary MAC address update operation; their format definition can be but not limited to:

TMA-UPDATE. request(

Real Source Address, /*STA's real MAC address*/

Visual-STA identifier/* is the virtual STA instance number*/

Visual-STAT-Mac-Address, /*Newly assigned temporary MAC address, this parameter is only available when sent from the network side*/

Lifetime/*The lifetime of this temporary MAC address, only when sent from the network side */)

TMA-UPDATE. response(

Real Source Address, /*STA's real MAC address*/

Visual-STA identifier, /* is the virtual STA instance number*/

Result, /*The result of the update operation, success or failure*/

Visual-STAT-Mac-Address, /*Newly assigned temporary MAC address*/

Lifetime/*The lifetime of this temporary MAC address*/)

TMA-UPDATE.confirm(

Old Visual-STA T-Mac-Address, */old temporary MAC address*/)

When the method of the present invention defines the above-mentioned service primitives, it also defines three types of Action management frames to identify the action operations on the temporary MAC address, please refer to Table 1 and Table 2:

Table 1 Category Values, indicating the operation of the temporary MAC address: name value T-MAC-Address Action TBD Reserved TBD

Table 2T-Mac-Address Action Field Values, indicating the type of Action management frame: Action Field Value Description T-MAC-Address Update Request TBD T-MAC-Address Update Response TBD T-MAC-Address Update Confirm TBD Reserved TBD

The present invention realizes a method for updating the temporary MAC address used by the virtual STA, that is, using the Action management frame to update the temporary MAC address, but at the same time including using other management frames such as Probe frame and Authentication frame to perform similar updates. The method of the invention realizes a method for dynamically updating the protected temporary MAC address, thereby improving security.

It should be understood that the above descriptions for specific embodiments are relatively specific, and should not therefore be considered as limiting the scope of the patent protection of the present invention, and the scope of protection of the patent protection of the present invention should be determined by the appended claims.

Claims (9)

1, a kind of method of virtual terminal temporary media access control address dynamic altering, the access point of the network side of WLAN (wireless local area network) are provided with a temporary media access control address manager, and it may further comprise the steps:

A, before the life span of temporary media access control address arrives, distribute a new temporary media access control address by described temporary media access control address manager, and send to described virtual terminal equipment, wherein carry the true media access control address of this terminal equipment, corresponding virtual terminal device instance number and described new temporary media access control address at least;

After B, described virtual terminal equipment are received this new temporary media access control address, start the life span timing of new temporary media access control address, and send confirmation to described temporary media access control address manager.

2, method according to claim 1 is characterized in that, described method is when being initiated by virtual terminal equipment, and is further comprising the steps of:

A1, send the temporary media access control address update request to the temporary media access control address manager by described virtual terminal equipment, and the instance number of the respective virtual terminal equipment of temporary address is upgraded in the request of carrying, enable timer, wait for that temporary media access control address upgrades response;

B1, described temporary media access control address manager are discerned this renewal operation with the media access control address that is using of this virtual terminal equipment and the instance number of virtual terminal equipment, if still can not receive corresponding temporary media access control address, described timer expiry upgrades response, then retransmit temporary media access control address update request pre-determined number, as new temporary media access control address as described in still can not receiving, then described virtual terminal equipment continues to use old temporary media access control address.

3, method according to claim 2 is characterized in that, described steps A also comprises:

A11, described access point are received the temporary media access control address update request that this virtual terminal equipment sends, and promptly encapsulate forwarded is given described temporary media access control address manager;

Described access point is given in the new temporary media access control address encapsulation response that A12, described temporary media access control address manager will produce, and starts the life span timing;

A13, described access point encapsulate forwarded give described virtual terminal equipment, wherein carry upgrade successfully, new temporary media access control address, life span parameter.

4, method according to claim 3 is characterized in that, described step B also comprises:

Send a temporary media access control address for described access point after B11, described virtual terminal equipment upgrade new temporary media access control address successfully and upgrade confirmation, wherein carry old temporary media access control address as parameter;

B12, described access point receive that the temporary media access control address that this virtual terminal equipment sends upgrades confirmation, the new temporary media access control address corresponding with this virtual terminal equipment upgraded down, the destination address that is dealt into 802.11 frames of this terminal equipment is promptly filled out this new temporary media access control address, initiates more new technological process of a new temporary media access control address again before its life span finishes.

5, method according to claim 4, it is characterized in that, when described access point upgrades confirmation at the temporary media access control address of not receiving described virtual terminal equipment, repeating said steps A13 pre-determined number, and send 802.11 frames to this virtual terminal equipment as destination address with old temporary media access control address, as not receiving that still corresponding temporary media access control address upgrades confirmation, then continue to use old temporary media access control address, and all restart life span timing old temporary media access control address at described virtual terminal and network side.

6, method according to claim 5, it is characterized in that, comprise also among the described step B that this terminal equipment keeps the corresponding relation of new, the old temporary media access control address of a scheduled time and virtual terminal device instance number, and the source address of receiving 802.11 frames that described access point sends over fill out be new temporary media access control address the time, remove the corresponding relation of the instance number of old temporary media access control address and virtual terminal equipment.

7, method according to claim 1 is characterized in that, described network side can initiatively distribute new temporary media access control address.

8, method according to claim 1, it is characterized in that, also comprise: after described terminal equipment side is initiated temporary media access control address renewal operation requests, if receive the active lastest imformation that described network side sends over, then initiatively stop more new technological process of temporary media access control address that this side initiatively initiates, and respond more new technological process of temporary media access control address that described network side initiates.

9, method according to claim 8, it is characterized in that, also comprise: after described network side is initiated temporary media access control address renewal operation requests, upgrade operation requests information if receive the temporary media access control address that terminal equipment side sends over, then do not respond the temporary media access control address renewal operation requests that described terminal equipment side is initiatively initiated.

Images