Systems and methods for provisioning devices for WLAN
地域：
Hamilton
摘要
A wireless network interface generates a beacon frame, and transmits the beacon frame outside of a wireless local area network (WLAN) served by an access point (AP). Additionally or alternatively, the wireless network interface receives a first probe request frame from a client station in the WLAN, and in response, generates and transmits a probe response frame outside of the WLAN. The wireless network interface receives one or more frames from the client station of the WLAN, the one or more frames having been transmitted outside of the WLAN. Network security information corresponding to the WLAN is extracted from the one or more frames, and the wireless network interface uses the network security information to wirelessly connect to the AP as part of the WLAN.
說明書
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
This application claims the benefit of U.S. Provisional Patent Application. No. 62/153,241, entitled “WLAN Smart Provisioning,” filed on Apr. 27, 2015, and U.S. Provisional Patent Application No. 62/163,040 entitled “SMART CONFIGURATION MODE IN WLAN DEVICE,” filed on May 18, 2015, the disclosures of both of which are incorporated herein by reference in their entireties.
The present disclosure relates generally to communication networks and, more particularly, to provisioning of devices in wireless local area networks.
WiFi networks, such as WiFi networks operating according to one or more of the Institute for Electrical and Electronics Engineers (IEEE) 802.11a, 802.11b, 802.11n, or 802.11ac Standards, are commonly used within homes and businesses. In addition to providing network connectivity to computing devices such as laptop computers and smartphones, these WiFi networks can provide connectivity to various “smart” devices, such as thermostats, water heaters, lighting systems, consumer appliances, security systems, etc. To gain access to the WiFi network, a new device generally must first be “provisioned.” Provisioning is a process by which a WiFi-enabled device obtains network credentials that enable secure connection to the wireless network. Once connected, the device can access various services, such as Internet service, through the WiFi access point (AP). As just one example, if a WiFi enabled thermostat is connected to a WiFi network, a user may employ an application running on a smartphone to remotely control the thermostat.
權(quán)利要求
The invention claimed is:1. A method of joining an apparatus to a wireless local area network (WLAN) served by an access point (AP), the method comprising:generating, at a wireless network interface of the apparatus, a beacon frame that includes a service set identifier (SSID) corresponding to the apparatus and different from an SSID corresponding to the WLAN served by the AP; transmitting, with the wireless network interface of the apparatus and to a client station of the WLAN, the beacon frame outside of the WLAN to prompt the client station of the WLAN to transmit network security information corresponding to the WLAN to the wireless network interface so that the wireless network interface can use the network security information to wirelessly connect the wireless network interface to the AP as part of the WLAN; wirelessly receiving, at the wireless network interface and from the client station, one or more frames transmitted from the client station of the WLAN in response to the beacon frame, the one or more frames having been transmitted outside of the WLAN, wherein the one or more frames include the network security information corresponding to the WLAN; extracting, from the one or more frames received from the client station, the network security information corresponding to the WLAN using at least one of i) the wireless network interface of the apparatus and ii) a processor of the apparatus; and wirelessly associating, at the wireless network interface of the apparatus, with the AP as part of the WLAN using the network security information extracted from the one or more frames received from the client station. 2. The method of claim 1 , wherein the network security information in the one or more frames includes the service set identifier (SSID) corresponding to the WLAN served by the AP and a credential corresponding to the WLAN served by the AP. 3. The method of claim 2 , wherein:the network security information is fragmented into a plurality of portions; and receiving the one or more frames comprises receiving a plurality of frames, each frame in the plurality of frames including a respective portion among the plurality of portions. 4. The method of claim 1 , wherein:at least some of the network security information is encrypted; and the method further comprises decrypting, with at least one of i) the wireless network interface and ii) the processor of the apparatus, the network securing information. 5. The method of claim 1 , wherein the one or more frames include one or more probe request frames. 6. The method of claim 1 , wherein:the one or more frames include one or more multicast frames; the method further comprises determining, with at least one of i) the wireless network interface of the apparatus and ii) the processor of the apparatus, for each multicast frame whether a corresponding multicast address of the multicast frame is within a predetermined range; and extracting network security information comprises, for each multicast frame, extracting network security information in response to determining that the corresponding multicast address of the multicast frame is within the predetermined range. 7. The method of claim 6 , wherein:the one or more multicast frames include a plurality of multicast frames; and the method further comprises, in response to determining that a multicast address of a multicast frame among the plurality of multicasts frames is within the predetermined range,stopping transmission, by the wireless network interface of the apparatus, of at least one of i) beacon frames, and ii) probe response frames. 8. The method of claim 1 , further comprising:in response to connecting the wireless network interface of the apparatus to the AP as part of the WLAN, transmitting to the client station of the WLAN, with the wireless network interface of the apparatus, a second probe response frame having information indicating that the wireless network interface of the apparatus is connected to the AP as part of the WLAN. 9. The method of claim 1 , wherein the one or more frames comprise a plurality of frames, and wherein the method further comprises:transmitting, with the wireless network interface of the apparatus, a plurality of beacon frames outside of the WLAN on respective channels among a plurality of channels to prompt the client station of the WLAN to transmit network security information corresponding to the WLAN to the wireless network interface of the apparatus so that the wireless network interface can use the network security information to wirelessly connect the wireless network interface of the apparatus to the AP as part of the WLAN; on each respective channel, listening, with the wireless network interface of the apparatus, for a probe request frame for a first period of time, the probe request frame being responsive to a respective beacon frame, among the plurality of beacon frames, transmitted by the wireless network interface of the apparatus on the respective channel; in response to the wireless network interface of the apparatus transmitting a first beacon frame on one of the channels, receiving, at the wireless network interface of the apparatus, one of the plurality of frames on the one channel; and in response to receiving, at the wireless network interface of the apparatus, the one of the plurality of frames on the one channel, listening on the one channel for other frames in the plurality of frames for a second period of time that is greater than the first period of time. 10. The method of claim 9 , further comprising:in response to receiving the one of the plurality of frames on the one channel, stopping transmission, by the wireless network interface of the apparatus, of the plurality of beacon frames. 11. An apparatus, comprising:a processor; and a wireless network interface having one or more integrated circuits configured to:generate a beacon frame that includes a service set identifier (SSID) corresponding to the apparatus and different from an SSID corresponding to a wireless local area network (WLAN) served by an access point (AP), transmit the beacon frame outside of the WLAN to a client station of the WLAN to prompt the client station in the WLAN to transmit network security information corresponding to the WLAN to the wireless network interface so that the wireless network interface can use the network security information to wirelessly connect the wireless network interface to the AP as part of the WLAN, wirelessly receive one or more frames from the client station of the WLAN, the one or more frames having been transmitted outside of the WLAN and from the client station in response to the beacon frame, and wherein the one or more frames include the network security information corresponding to the WLAN, extract, from the one or more frames received from the client station, the network security information corresponding to the WLAN using at least one of i) the wireless network interface and ii) the processor, and wirelessly associate with the AP as part of the WLAN using the network security information extracted from the one or more frames received from the client station. 12. The apparatus of claim 11 , wherein the network security information in the one or more frames include the service set identifier (SSID) corresponding to the WLAN served by the AP and a credential corresponding to the WLAN served by the AP. 13. The apparatus of claim 12 , wherein:the network security information is fragmented into a plurality of portions; and the one or more integrated circuits are further configured to receive a plurality of frames, each frame in the plurality of frames including a respective portion among the plurality of portions. 14. The apparatus of claim 11 , wherein:at least some of the network security information is encrypted; and at least one of i) the wireless network interface of the apparatus and ii) the processor of the apparatus is configured to decrypt the network security information. 15. The apparatus of claim 11 , wherein the one or more frames includes one or more probe request frames. 16. The apparatus of claim 11 , wherein:the one or more frames include one or more multicast frames; and at least one of i) the one or more integrated circuits and ii) the processor are further configured to:determine, for each multicast frame, whether a corresponding multicast address of the multicast frame is within a predetermined range, and for each multicast frame, extract network security information in response to determining that the corresponding multicast address of the multicast frame is within the predetermined range. 17. The apparatus of claim 16 , wherein:the one or more multicast frames include a plurality of multicast frames; and the one or more integrated circuits are further configured to, in response to determining that a multicast address of a multicast frame among the plurality of multicast frames is within the predetermined range, stop transmission of at least one of i) beacon frames and ii) probe response frames. 18. The apparatus of claim 11 , wherein the one or more integrated circuits are further configured to:in response to connecting the wireless network interface of the apparatus to the AP as part of the WLAN, transmit to the client station of the WLAN a second probe response frame having information indicating that the wireless network interface of the apparatus is connected to the AP as part of the WLAN. 19. The apparatus of claim 11 , wherein:the one or more frames comprise a plurality of frames; the one or more integrated circuits are further configured to:transmit a plurality of beacon frames outside of the WLAN on respective channels among a plurality of channels to prompt the client station in the WLAN to transmit network security information corresponding to the WLAN to the wireless network interface of the apparatus so that the wireless network interface of the apparatus can use the network security information to wirelessly connect the wireless network interface of the apparatus to the AP as part of the WLAN, on each respective channel, listen for a probe request frame for a first period of time, the probe request frame being responsive to a respective beacon frame, among the plurality of beacon frames, transmitted by the wireless network interface of the apparatus on the respective channel, in response to the wireless network interface of the apparatus transmitting a first beacon frame on one of the channels, receive one of the plurality of frames on the one channel, and in response to receiving the one of the plurality of frames on the one channel, listen on the one channel for other frames in the plurality of frames for a second period of time that is greater than the first period of time. 20. The apparatus of claim 19 , wherein the one or more integrated circuits are further configured to:in response to receiving the one of the plurality of frames on the one channel, stop transmission of the plurality of beacon frames. 21. A method of assisting an apparatus to join a wireless local area network (WLAN) served by an access point (AP), the method comprising:generating, at a wireless network interface of a client station of the WLAN, a probe request frame that includes a service set identifier (SSID) corresponding to the apparatus and different from an SSID corresponding to the WLAN served by the AP; transmitting, with the wireless network interface of the client station and to the apparatus, the probe request frame outside of the WLAN to prompt the apparatus to wirelessly transmit a probe response frame outside of the WLAN as part of a procedure to provide the apparatus with network security information corresponding to the WLAN to assist the apparatus to wirelessly connect to the AP as part of the WLAN; and in response to wirelessly receiving the probe response frame from the apparatus, transmitting, from the wireless network interface of the client station of the WLAN, one or more frames that include the SSID corresponding to the apparatus as part of the procedure to provide the apparatus with network security information corresponding to the WLAN, the one or more frames having been transmitted outside of the WLAN; wherein the apparatus is located apart from the client station and wirelessly communicates with the client station; and wherein at least one of i) the probe request frame transmitted by the wireless network interface of the client station and ii) the one or more frames transmitted by the wireless network interface of the client station include the network security information, corresponding to the WLAN, to assist the apparatus in wirelessly connecting to the AP as part of the WLAN. 22. The method of claim 21 , wherein the network security information includes the service set identifier (SSID) corresponding to the WLAN served by the AP and a credential corresponding to the WLAN served by the AP. 23. The method of claim 22 , wherein:the network security information is fragmented into a plurality of portions; and transmitting the one or more frames comprises transmitting a plurality of frames, each frame in the plurality of frames including a respective portion among the plurality of portions. 24. The method of claim 21 , wherein the method further comprises encrypting, with at least one of i) the wireless network interface of the client station and ii) a processor of the client station, the network security information. 25. The method of claim 21 , wherein:the one or more frames include one or more multicast frames. 26. The method of claim 21 , further comprising:receiving, at the client station of the WLAN, a probe response frame having information indicating that the wireless network interface of the apparatus is connected to the AP as part of the WLAN. 27. A client station in a wireless local area network (WLAN) served by an access point (AP), the client station comprising:a wireless network interface having one or more integrated circuits configured to:generate at the client station a probe request frame that includes a service set identifier (SSID) corresponding to a communication device and different from an SSID corresponding to the WLAN served by the AP, and transmit the probe request frame outside of the WLAN served by the AP and to the communication device to prompt the communication device to wirelessly transmit a probe response frame outside of the WLAN as part of a procedure to provide the other communication device with network security information corresponding to the WLAN to assist the other communication device to wirelessly connect to the AP as part of the WLAN; wherein the one or more integrated circuits are further configured to: in response to receiving the probe response frame the communication device, transmit one or more frames that include the SSID corresponding to the communication device outside of the WLAN as part of the procedure to provide the communication device with network security information corresponding to the WLAN; wherein at least one of i) the probe request frame transmitted by the wireless network interface of the client station and ii) the one or more frames transmitted by the wireless network interface of the client station include the network security information, corresponding to the WLAN, to assist the communication device in wirelessly connecting to the AP as part of the WLAN. 28. The client station of claim 27 , wherein the network security information in the at least one of i) the probe request frame and ii) the one or more frames includes service set identifier (SSID) corresponding to the WLAN served by the AP and a credential corresponding to the WLAN served by the AP. 29. The client station of claim 28 , wherein:at least one of i) the wireless network interface and ii) the processor of the client station is further configured to fragment the network security information into a plurality of portions; and the one or more integrated circuits are configured to: in response to receiving the probe response frame from the communication device, transmit a plurality of frames outside of the WLAN, each frame in the plurality of frames including a respective portion among the plurality of portions. 30. The client station of claim 27 , wherein at least one of i) the wireless network interface of the client station and ii) a processor of the client station is further configured to encrypt the network security information. 31. The client station of claim 27 , wherein:the one or more frames include one or more multicast frames. 32. The client station of claim 27 , wherein the one or more integrated circuits are further configured to:receive a probe response frame having information indicating that the communication device is connected to the AP as part of the WLAN.
意見反饋
使用該功能遇到問題