HK1227217B - Access method and access device - Google Patents

Description

Access method and device

Technical Field

The present application relates to the field of network technology, and in particular to an access method and device.

Background Art

Home wireless networks typically use a pre-shared key (PSK) as the network access key. This key scheme offers advantages such as ease of configuration and ease of use. However, since all devices accessing the same home network use the same PSK, security is compromised. For example, if a visitor wishes to use the wireless local area network (WLAN), the password must be shared with the visitor. However, once the visitor has the shared key, they could potentially decrypt wireless transmissions from other users on the same home network, compromising communication security.

To improve the security of home network keys, the industry has proposed a security verification method based on an authentication server. However, this method requires the establishment of a dedicated authentication server. For families or small companies, the installation and maintenance costs are high, and complex configuration is also required on wireless terminals.

In summary, without deploying an authentication server, the access security of all users using the same PSK to access the same home wireless network is low.

Summary of the Invention

The embodiments of the present application provide an access method and device to solve the problem of low access security of a home network.

An access method provided in an embodiment of the present application includes:

The access point AP receives the information integrity check code MIC sent by the first wireless terminal STA when requesting access;

The AP determines whether the MIC generated based on the common pre-shared key is consistent with the MIC sent by the first STA;

If they are inconsistent, it is determined whether there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA. After determining that there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA, the first STA is allowed to access.

Optionally, after the AP determines that there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA, before allowing the first STA to access, the AP further includes:

The AP determines that the temporary pre-shared key is not used by STAs other than the first STA to generate a MIC.

Optionally, the AP determining whether there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA includes:

The AP matches each temporary pre-shared key in the stored temporary pre-shared key list with the MIC sent by the first STA in sequence. If a temporary pre-shared key matching the MIC sent by the first STA is found, it is determined that there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA.

Optionally, the method further includes:

For any temporary pre-shared key, if the AP determines that any temporary pre-shared key has not been used within the first validity period, the any temporary pre-shared key is set to invalid; and/or, if the AP determines that the time between the current time and the generation time of any temporary pre-shared key exceeds the second validity period, the any temporary pre-shared key is set to invalid.

Optionally, before the AP receives the information integrity check code MIC sent by the first wireless terminal STA when requesting access, the method further includes:

The AP receives the temporary pre-shared key sent by a second STA that uses the universal pre-shared key to access the AP.

Another embodiment of the present invention provides an access method, including:

The second wireless terminal STA configures a temporary pre-shared key; the temporary pre-shared key is used by the first STA to generate an integrity check code MIC, and the MIC is used by the access point AP to verify the correctness of the first STA;

The second STA uses a universal pre-shared key to access the AP, and sends the configured temporary pre-shared key to the access point AP; the temporary pre-shared key is different from the universal pre-shared key.

Optionally, the second wireless terminal STA configures a temporary pre-shared key, including:

The second STA receives a temporary pre-shared key input by a user; or the second STA randomly generates a temporary pre-shared key.

Optionally, the method further includes:

The second STA sends the configured first validity period and/or second validity period of the temporary pre-shared key to the AP; the first validity period and/or the second validity period are used to determine the validity of the temporary pre-shared key. If the temporary pre-shared key is not used within the first validity period, it is set to invalid. If the duration between the current time and the time when the temporary pre-shared key is received exceeds the second validity period, the temporary pre-shared key is set to invalid.

An embodiment of the present invention provides an access device, including:

A receiving module, configured to receive a message integrity check code MIC sent by a first wireless terminal STA when requesting access;

a judgment module, configured to judge whether the MIC generated based on the universal pre-shared key is consistent with the MIC sent by the first STA; if they are inconsistent, judging whether there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA;

The access module is configured to allow the first STA to access after determining that there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA.

Another embodiment of the present invention provides an access device, including:

A configuration module is configured to configure a temporary pre-shared key; the temporary pre-shared key is used by the first STA to generate an integrity check code MIC, and the MIC is used by the access point AP to verify the correctness of the first STA;

The sending module is configured to access the AP using a universal pre-shared key and send the configured temporary pre-shared key to the access point AP; the temporary pre-shared key is different from the universal pre-shared key.

By using the above method or device, a temporary pre-shared key can be assigned to the first STA that temporarily accesses the home network. After the AP fails to verify the correctness of the MIC sent by the first STA based on the universal pre-shared key, if the AP verifies the correctness of the MIC using the temporary pre-shared key, the first STA can be allowed to access the home network, thereby eliminating the need to send the universal pre-shared key for its own use to the first STA. This improves the access security of the home network without deploying an authentication server.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a flow chart of an access method provided in Example 1 of the present application;

FIG2 is a flow chart of an access method provided in Example 2 of the present application;

FIG3 is a flow chart of an access method provided in Example 3 of the present application;

FIG4 is a schematic diagram of the structure of an access device provided in Example 4 of the present application;

FIG5 is a schematic diagram of the structure of the access device provided in Example 5 of the present application.

DETAILED DESCRIPTION

The basic idea of the embodiments of the present application is to set two types of keys for a home wireless network: a universal pre-shared key and a temporary pre-shared key. Both types of keys are pre-shared keys (PSK). In a Wi-Fi Protected Access (WPA personal) network, the PSK is a pairwise master key (PMK). For example, a user with control access rights to a home network can use a universal pre-shared key to access the home network, and can notify a guest of the temporary pre-shared key, which the guest then uses to access the home network. In a specific implementation, after receiving a message integrity code (MIC) sent by a first wireless terminal (STA) when requesting access, the access point (AP) first uses the universal pre-shared key to verify the correctness of the MIC (i.e., to determine whether the MIC generated based on the universal pre-shared key is consistent with the MIC sent by the first STA). If the verification fails (i.e., it is determined that the MIC generated based on the universal pre-shared key is inconsistent with the MIC sent by the first STA), it is then determined whether there is a temporary pre-shared key that matches the MIC sent by the first STA. If so, the first STA is allowed access.

By using the embodiment of the present application, a temporary pre-shared key can be assigned to the first STA that temporarily accesses the home network. After the AP fails to verify the correctness of the MIC sent by the first STA based on the universal pre-shared key, if the AP verifies the correctness of the MIC using the temporary pre-shared key, the first STA can be allowed to access the home network, thereby eliminating the need to send the universal pre-shared key for its own use to the first STA, thereby improving the access security of the home network without deploying an authentication server.

The embodiments of the present application are described in further detail below with reference to the accompanying drawings.

Example 1

As shown in FIG1 , a flowchart of the access method provided in Example 1 of the present application includes the following steps:

S101: The AP receives a MIC sent by a first STA when requesting access.

When a first STA requests access, it performs a four-way handshake with the AP. During the first handshake, the AP sends a message to the first STA containing a random number (ANounce, generated by the AP's authenticator) and the AP's Media Access Control (MAC) address. The first STA then generates a random number (SNounce, generated by the STA's supplicant). Based on the SNounce, ANounce, the AP's MAC address, the first STA's MAC address, and a pre-shared key (PSK), the first STA generates a pairwise transient key (PTK). This PTK is used to encrypt and verify the integrity of the first STA's communications.

The first STA generates a verification code MIC based on the PSK to ensure the integrity of information transmission. If the first STA is not a wireless terminal used by the user who has control over the home network, such as a wireless terminal of a visitor in the home, the PSK used by the first STA to generate the MIC is a temporary pre-shared key notified by the user who has control over the home network. During the second handshake, the first STA sends SNounce, its own MAC address and the generated MIC to the AP. At this time, the AP can generate a PTK based on SNounce, ANounce, the MAC address of the AP, the MAC address of the first STA and the PSK. The AP uses a universal pre-shared key (that is, the PSK used by the user who has control over the home network when he needs to access the network) to verify the correctness of the MIC sent by the first STA based on the following step S102. During the third handshake, the AP sends a validity response to the first STA. During the fourth handshake, the first STA replies with an Acknowledgement (ACK) message to the AP, and the two parties formally establish a communication connection. After that, the two parties encrypt the communication messages based on the PTK and the global encryption key (Group Transient Key, GTK) before transmission. The GTK is generated by the AP, and the AP uses the GTK to encrypt the communication messages of all STAs associated with it.

S102: The AP determines whether the MIC generated based on the universal pre-shared key is consistent with the MIC sent by the first STA. If they are consistent, the process proceeds to S104; otherwise, the process proceeds to S103.

In this step, the AP uses the universal pre-shared key previously registered by the second STA to generate a MIC based on a preset algorithm, and compares the MIC generated by the AP with the MIC sent by the first STA to see if they are consistent. If they are consistent, the AP confirms that the correctness verification of the first STA has passed.

S103: The AP determines whether there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA. If it is determined that there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA, the process proceeds to S104; otherwise, the process proceeds to S105.

In this step, the AP matches each TPSK in the saved temporary pre-shared key (Temporary PSK, TPSK) list with the MIC sent by the first STA in turn (that is, generates a MIC according to each TPSK in turn, and determines whether the generated MIC is the MIC sent by the first STA). If a temporary pre-shared key that matches the MIC sent by the first STA is found, it is determined that there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA, that is, it is determined that the correctness verification of the first STA is passed, and the first STA is allowed to access.

Here, the temporary pre-shared key stored in the AP can be actively configured by the user or randomly generated by the wireless terminal or the AP. Preferably, the AP receives the temporary pre-shared key sent by a second STA that accesses the AP using the universal pre-shared key; that is, after a user with control rights to the home network accesses the AP using the universal pre-shared key without usage restrictions, the user-configured or randomly generated temporary pre-shared key is sent to the AP.

S104: Allow the first STA to access;

S105: Deny access to the first STA.

Optionally, after the AP determines that there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA, before allowing the first STA to access, the AP further includes:

The AP determines that the temporary pre-shared key is not used by STAs other than the first STA to generate a MIC.

During implementation, to further ensure the security of home network access, each TPSK can be set to be used by only one STA. After determining the existence of a temporary pre-shared key that can be used to generate the MIC sent by the first STA, the AP can first determine whether the temporary pre-shared key has not been used by STAs other than the first STA to generate the MIC. If it has not been used by STAs other than the first STA, the first STA is allowed access and the TPSK is bound to the first STA. Subsequently, the first STA can continue to use the TPSK to access the network, while other STAs can no longer use the TPSK. Specifically, binding the TPSK to the first STA can include adding the MAC address of the first STA corresponding to the TPSK to the temporary pre-shared key list, and then determining whether the TPSK has been bound by comparing the MAC addresses.

Optionally, the method further includes:

For any temporary pre-shared key, if the AP determines that any temporary pre-shared key has not been used within the first validity period, the any temporary pre-shared key is set to invalid; and/or, if the AP determines that the time between the current time and the generation time of any temporary pre-shared key exceeds the second validity period, the any temporary pre-shared key is set to invalid.

During the specific implementation process, in order to further ensure the security of home network access, the first validity period and second validity period can be set for each TPSK. If the temporary pre-shared key is not used within the first validity period, the temporary pre-shared key will be deemed invalid and deleted from the TPSK list to prevent the TPSK from being illegally used. After the second validity period, regardless of whether the temporary pre-shared key is used, it will be set to invalid.

Example 2

Embodiment 2 of the present application corresponds to an optional implementation manner in the above-mentioned embodiment 1.

As shown in FIG2 , the access method flow chart provided in the second embodiment of the present application includes the following steps:

S201: The second STA configures a temporary pre-shared key; the temporary pre-shared key is used by the first STA to generate a MIC, and the MIC is used by the AP to verify the correctness of the first STA.

In this step, the second STA may receive a temporary pre-shared key TPSK input by the user; or randomly generate the TPSK, for example, based on a preset rule (such as limiting the TPSK to 8 to 63 ASCII characters).

During the specific implementation process, in order to further ensure the security of the home network, the second STA can configure the first validity period and/or second validity period of the TPSK. Specifically, the second STA can receive the first validity period and/or second validity period of the TPSK input by the user, and send the first validity period and/or second validity period of the TPSK set by the user to the AP; here, the first validity period and/or the second validity period are used to determine the validity of the TPSK. If the TPSK is not used within the first validity period (for example, set to 60 seconds), it is set to invalid. If the time between the current time and the time when the TPSK is received exceeds the second validity period (for example, set to 1 day), the TPSK is set to invalid.

S202: The second STA uses a universal pre-shared key to access the AP, and sends the configured temporary pre-shared key to the AP; the temporary pre-shared key is different from the universal pre-shared key.

In this step, the second STA generates a MIC based on the universal PSK and sends it to the AP during the four-way handshake. After the AP verifies the correctness of the MIC, it allows the second STA to access. After the second STA accesses the AP, it sends the user-set TPSK to the AP, which saves it in the TPSK list.

Example 3

As shown in FIG3 , the access method flow chart provided in the third embodiment of the present application includes the following steps:

S301: A second STA uses a universal pre-shared key to access an AP, and sends a configured temporary pre-shared key, as well as a first validity period and a second validity period of the temporary pre-shared key to the AP.

Here, the first validity period is used for the AP to receive the temporary pre-shared key sent by the second STA. If it is determined that the temporary pre-shared key has not been used within the first validity period, the temporary pre-shared key is set to invalid; the second validity period is used for the AP to receive the temporary pre-shared key sent by the second STA. If it is determined that the duration between the current time and the time when the temporary pre-shared key was received exceeds the second validity period, the temporary pre-shared key is set to invalid.

The universal pre-shared key is also configured by the second STA. Using the universal pre-shared key to access the AP means generating a MIC based on the universal pre-shared key and sending it to the AP. After the AP verifies its correctness, it allows the second STA to access.

S302: The AP receives the MIC sent by the first STA when requesting access.

S303: The AP determines whether the MIC generated based on the universal pre-shared key is consistent with the MIC sent by the first STA; if they are consistent, the process proceeds to S304; otherwise, the process proceeds to S305.

S304: The AP allows the first STA to access.

S305: The AP determines whether there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA. If it is determined that there is, the process proceeds to S306; otherwise, the process proceeds to S308.

S306: Determine whether the temporary pre-shared key is used by a STA other than the first STA to generate a MIC. If not, proceed to S307; otherwise, proceed to S308.

S307: The AP allows the first STA to access, and binds the first STA with the temporary pre-shared key.

For example, the temporary pre-shared key list is checked to see if the temporary pre-shared key is bound to any STA other than the first STA. If so, the first STA is denied access; otherwise, the first STA is allowed access. Binding means that the temporary pre-shared key can only be used by the first STA.

S308: The AP rejects the access of the first STA.

Based on the same inventive concept, an access device corresponding to the access method is also provided in an embodiment of the present application. Since the principle of solving the problem by the device is similar to that of the access method in the embodiment of the present application, the implementation of the device can refer to the implementation of the method, and the repeated parts will not be repeated.

Example 4

As shown in FIG4 , a schematic diagram of the access device structure provided in the fourth embodiment of the present application includes:

The receiving module 41 is configured to receive a message integrity check code MIC sent by a first wireless terminal STA when requesting access;

a determination module 42, configured to determine whether the MIC generated based on the universal pre-shared key is consistent with the MIC sent by the first STA; if not, determining whether there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA;

The access module 43 is configured to allow the first STA to access after determining that there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA.

Optionally, the access module 43 is specifically used to: after determining that there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA, if it is determined that the temporary pre-shared key is not used by STA other than the first STA to generate MIC, allow the first STA to access.

Optionally, the judgment module 42 is specifically configured to:

Each temporary pre-shared key in the saved temporary pre-shared key list is matched with the MIC sent by the first STA in turn. If a temporary pre-shared key that matches the MIC sent by the first STA is found, it is determined that there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA.

Optionally, the device further comprises:

The invalidation module 44 is configured to invalidate any temporary pre-shared key if it is determined that the temporary pre-shared key has not been used within the first validity period; and/or invalidate any temporary pre-shared key if it is determined that the time between the current time and the generation time of the temporary pre-shared key exceeds the second validity period.

Optionally, the receiving module 41 is further configured to, before receiving the information integrity check code MIC sent by the first wireless terminal STA when requesting access, receive the temporary pre-shared key sent by the second STA that uses the universal pre-shared key to access the AP.

Example 5

As shown in FIG5 , a schematic diagram of the access device structure provided in Example 5 of the present application includes:

A configuration module 51 is configured to configure a temporary pre-shared key; the temporary pre-shared key is used by the first STA to generate an integrity check code MIC, and the MIC is used by the access point AP to verify the correctness of the first STA;

The sending module 52 is configured to access the AP using a universal pre-shared key and send the configured temporary pre-shared key to the access point AP; the temporary pre-shared key is different from the universal pre-shared key.

Optionally, the configuration module 51 is specifically configured to:

Receive a temporary pre-shared key entered by the user; or randomly generate a temporary pre-shared key.

Optionally, the sending module 52 is further configured to:

The configured first validity period and/or second validity period of the temporary pre-shared key is sent to the AP; the first validity period and/or the second validity period are used to determine the validity of the temporary pre-shared key. If the temporary pre-shared key is not used within the first validity period, it is set to invalid. If the duration between the current time and the time when the temporary pre-shared key is received exceeds the second validity period, the temporary pre-shared key is set to invalid.

Those skilled in the art will appreciate that the embodiments of the present application can be provided as methods, systems, or computer program products. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

The present application is described with reference to the flowchart and/or block diagram of the method, device (system), and computer program product according to the embodiment of the present application. It should be understood that each process and/or box in the flowchart and/or block diagram, and the combination of the process and/or box in the flowchart and/or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for implementing the function specified in one process or multiple processes in the flowchart and/or one box or multiple boxes in the block diagram.

These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a product including an instruction device that implements the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, so that the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more processes in the flowchart and/or one or more boxes in the block diagram.

Although the preferred embodiments of the present application have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present application.

Obviously, those skilled in the art may make various changes and modifications to this application without departing from the spirit and scope of this application. Thus, if these modifications and variations of this application fall within the scope of the claims of this application and their equivalents, this application is intended to include these modifications and variations.

Claims (14)

1. An access method, characterized in that the method includes: The access point (AP) receives the information integrity check code (MIC) sent by the first wireless terminal (STA) when requesting access. The AP determines whether the MIC generated based on the general pre-shared key is consistent with the MIC sent by the first STA; If there is a discrepancy, it is determined whether there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA. If it is determined that there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA, and if the AP determines that the temporary pre-shared key has not been used by any STA other than the first STA to generate the MIC, then the first STA is allowed to access. 2. The method as described in claim 1, wherein the AP determines whether a temporary pre-shared key exists that can be used to generate the MIC sent by the first STA, comprising: The AP will sequentially match each temporary pre-shared key in the saved temporary pre-shared key list with the MIC sent by the first STA. If a temporary pre-shared key matching the MIC sent by the first STA is found, it is determined that there exists a temporary pre-shared key that can be used to generate the MIC sent by the first STA. 3. The method as described in claim 1, characterized in that the method further comprises: For any temporary pre-shared key, if the AP determines that the temporary pre-shared key has not been used within the first validity period, then the temporary pre-shared key is set to invalid; and/or, if the AP determines that the time between the current time and the generation time of the temporary pre-shared key exceeds the second validity period, then the temporary pre-shared key is set to invalid. 4. The method as described in any one of claims 1 to 3, characterized in that, before the AP receives the Information Integrity Check Code (MIC) sent by the first wireless terminal STA when requesting access, it further includes: The AP receives the temporary pre-shared key sent by the second STA that accesses the AP using the general pre-shared key. 5. An access method, characterized in that the method includes: The second wireless terminal (STA) is configured with a temporary pre-shared key; the temporary pre-shared key is used by the first STA to generate an integrity check code (MIC), and the MIC is used by the access point (AP) to verify the correctness of the first STA. The second STA accesses the AP using a general pre-shared key and sends the configured temporary pre-shared key to the access point AP; the temporary pre-shared key is different from the general pre-shared key. 6. The method as described in claim 5, wherein configuring a temporary pre-shared key for the second wireless terminal STA includes: The second STA receives a temporary pre-shared key input by the user; or, the second STA randomly generates a temporary pre-shared key. 7. The method as described in claim 5 or 6, characterized in that the method further comprises: The second STA sends the configured first validity period and/or second validity period of the temporary pre-shared key to the AP; the first validity period and/or second validity period are used to determine the validity of the temporary pre-shared key. If the temporary pre-shared key is not used within the first validity period, it is set to invalid. If the time between the current time and the time when the temporary pre-shared key is received exceeds the second validity period, the temporary pre-shared key is set to invalid. 8. An access device, characterized in that the device comprises: The receiving module is used to receive the information integrity check code (MIC) sent by the first wireless terminal (STA) when it requests access. The judgment module is used to determine whether the MIC generated based on the general pre-shared key is consistent with the MIC sent by the first STA; if they are inconsistent, it determines whether there is a temporary pre-shared key that can be used to generate the MIC sent by the first STA. The access module is configured to, after determining that a temporary pre-shared key exists that can be used to generate the MIC sent by the first STA, allow the first STA to access if it is determined that the temporary pre-shared key has not been used by any STA other than the first STA to generate the MIC. 9. The apparatus as described in claim 8, wherein the determining module is specifically used for: Each temporary pre-shared key in the saved temporary pre-shared key list is matched sequentially with the MIC sent by the first STA. If a temporary pre-shared key matching the MIC sent by the first STA is found, it is determined that there exists a temporary pre-shared key that can be used to generate the MIC sent by the first STA. 10. The apparatus of claim 8, wherein the apparatus further comprises: An invalidation module is configured to invalidate any temporary pre-shared key if it is determined that the temporary pre-shared key has not been used within the first validity period; and/or, if it is determined that the time between the current time and the generation time of the temporary pre-shared key exceeds the second validity period, then invalidate the temporary pre-shared key. 11. The apparatus according to any one of claims 8 to 10, wherein the receiving module is further configured to receive, before receiving the information integrity check code MIC sent by the first wireless terminal STA when requesting access, the temporary pre-shared key sent by the second STA using the general pre-shared key to access the access point AP. 12. An access device, characterized in that the device comprises: The configuration module is used to configure a temporary pre-shared key; the temporary pre-shared key is used by the first STA to generate an integrity check code (MIC), and the MIC is used by the access point (AP) to verify the correctness of the first STA. The sending module is used to access the AP using a general pre-shared key and send the configured temporary pre-shared key to the access point AP; the temporary pre-shared key is different from the general pre-shared key. 13. The apparatus of claim 12, wherein the configuration module is specifically used for: Receive a temporary pre-shared key input by the user; or, randomly generate a temporary pre-shared key. 14. The apparatus of claim 12 or 13, wherein the transmitting module is further configured to: The first validity period and/or the second validity period of the configured temporary pre-shared key are sent to the AP; the first validity period and/or the second validity period are used to determine the validity of the temporary pre-shared key. If the temporary pre-shared key is not used within the first validity period, it is set to invalid. If the time between the current time and the time when the temporary pre-shared key is received exceeds the second validity period, the temporary pre-shared key is set to invalid.