Wi-Fi CERTIFIED Passpoint R2 技术规格 v1.2：自动连接与数据卸载解决方案

需积分: 15 182 浏览量更新于2024-07-19 收藏 3.37MB PDF 举报

Hotspot_2-0_(R2)_Technical_Specification_v1.2 是Wi-Fi Alliance推出的一项重要技术规范，专注于Wi-Fi CERTIFIED Passpoint(R2)认证计划。该计划的核心目标是为用户提供安全、自动化的Wi-Fi热点网络接入服务，并协助运营商通过Wi-Fi技术实现移动数据流量的卸载，减轻蜂窝网络的压力。Passpoint (Release 2) 的设计旨在提升用户连接体验，确保无缝接入并维护运营商对于Wi-Fi技术的高效利用。作为下一代Wi-Fi热点解决方案，这个版本1.2的技术规格文档详细阐述了以下关键知识点： 1. 认证程序概述：Wi-Fi CERTIFIED Passpoint(R2) 是一项由Wi-Fi Alliance制定的标准，确保设备符合安全要求，能为用户提供便捷的接入方式，并且与WPA2TM加密技术相结合，保障网络连接的安全性。 2. 自动连接功能：通过技术规格，Passpoint(R2)着重于简化用户的接入流程，当用户靠近支持此标准的热点时，系统能够自动识别并引导用户完成身份验证，无需手动输入网络密码，提供了一站式的网络接入体验。 3. 运营商目标：文档强调了Passpoint(R2)对运营商的价值，它不仅提高了用户体验，还支持了运营商将部分移动数据流量转移到Wi-Fi网络，降低运营成本，优化网络负载。 4. 版权与许可：文档明确指出，所有内容受Wi-Fi Alliance的版权保护，使用须遵循文档中规定的条款。未经允许，用户不得随意修改或发布该文档，且其内容可能随时更新或撤回，使用者需自行承担风险。 5. 责任声明：Wi-Fi Alliance不对文档中的错误或遗漏承担责任，使用文档意味着接受这些规定。此外，只有在得到Wi-Fi Alliance明确批准的情况下，才能使用其商标和认证标志。 Hotspot_2-0_(R2)_Technical_Specification_v1.2 是Wi-Fi Alliance对于Wi-Fi热点接入技术的重要规范，旨在推动无线网络的无缝连接和安全性，同时为运营商和用户提供更高效、便捷的网络服务。对于IT专业人员来说，理解和遵循这一技术规格是确保产品和服务符合行业标准的关键。

Wi-Fi Alliance Hotspot 2.0 (Release 2) Technical Specification - Version 1.2

Used with the permission of Wi-Fi Alliance under the terms as stated in this document.

Page 16 of 207

Provisioning state: A mobile device state when the Wi-Fi infrastructure is establishing credential

information and providing policy information to the mobile device. If the mobile device already has

valid credentials for a given hotspot, this state is ephemeral.

Registration Authority (RA): A collection of computer hardware, software and the people who

operate it. The RA is known by two attributes: its name and its public key. The RA is responsible

for the verification of certificate contents for the Certificate Authority (CA).

Registration data: The data necessary to sign up for a subscription. Registration data typically

include selection of a rate plan, terms and conditions, subscriber’s contact information and

payment information (e.g., credit card, bank account number).

Registration state: A mobile device state when the mobile device is setting up a new account

with an SP or hotspot provider. If the mobile device already has valid credentials for a given

hotspot, this state is ephemeral.

Service Provider (SP): An entity offering network services (from the perspective of the Hotspot

Operator). SPs are represented in the Network Access Identifier (NAI) Realm, 3GPP Cellular

Network (in the form of a list of public land mobile network identifiers (PLMN IDs)) or Roaming

Consortium ANQP-elements.

subscription remediation: The process of fixing a problem in the subscriber’s subscription.

This includes provisioning new credentials to a mobile device (e.g., due to expiration), updating

the PerProviderSubscription management object (MO) on a mobile device (e.g., because data

need updates) or performing an online function to update the subscription (e.g., pay a delinquent

bill). Note that in the latter example no new credentials/data are provisioned to the mobile device.

terms and conditions (T&C) data: The data necessary to accept terms and conditions for

network access. The data typically include the subscriber’s contact information and an

acceptance indication.

Wi-Fi Alliance Hotspot 2.0 (Release 2) Technical Specification - Version 1.2

Used with the permission of Wi-Fi Alliance under the terms as stated in this document.

Page 18 of 207

MAC

medium access control

MCC

Mobile Country Code

MIME

Multipurpose Internet Mail Extensions

MNC

Mobile Network Code

management object

MRD

marketing requirements document

MSDU

MSISDN

medium access control (MAC) service data unit

Mobile Subscriber Integrated Services Digital Network

NAI

Network Access Identifier

NAT

network address translation

ND&S

network discovery and selection

OCSP

Online Certificate Status Protocol

organizational identifier

OMA

Open Mobile Alliance™

OSEN

online Sign Up (OSU) server-only authenticated layer 2 encryption

network

OSENA

online sign up (OSU) server-only authenticated layer 2 encryption

network association

OSU

online sign up

P2P

peer-to-peer (see [1])

PKI

Public Key Infrastructure

PLMN

public land mobile network

PMF

protected management frame

PPS MO

PerProviderSubscription management object

QoS

quality of service

Registration Authority

RADIUS

Remote Authentication Dial In User Service

REP

registration protocol

RFC

Request for Comments

RSN

robust security network

RSNA

robust security network association

RSNE

Robust Security Network element

RSSI

receive signal strength indicator

SIM

subscriber identity module

SMI

Structure of Management Information

SOAP

Simple Object Access Protocol

service provider

SPP

subscription provisioning protocol

SSH

secure shell

SSID

service set Identifier

T&C

terms and conditions

TKIP

temporal key integrity protocol

TLS

transport layer security

TTLS

tunneled transport layer security (TLS)

UDP

user datagram protocol

user interface

URI

uniform resource identifier

URL

universal resource locator

USIM

universal subscriber identity module

VoIP

voice over Internet Protocol (IP)

VPN

virtual private network

WAN

wide area network

WEP

wired equivalent privacy

WLAN

wireless local area network

WNM

wireless network management

WPA2™

Wi-Fi Protected Access® version 2

Wi-Fi Alliance Hotspot 2.0 (Release 2) Technical Specification - Version 1.2

Used with the permission of Wi-Fi Alliance under the terms as stated in this document.

Page 19 of 207

2. Hotspot 2.0 Device, Operator and Service Provider

requirements

Section 2.1 specifies the required capabilities for a Hotspot 2.0 (HS2.0) compliant access point

(AP). Section 2.2 specifies the required capabilities for an HS2.0 compliant mobile device.

Section 2.3 specifies the requirements applicable to Hotspot Operators, and section 2.4 specifies

the requirements applicable to Service Providers (SPs).

To ensure that a mobile device always has an authentication method in common with Wi-Fi and

SP infrastructure, the credential types and Extensible Authentication Protocol (EAP) methods

identified in Table 1 shall be supported by HS2.0 equipment (see sections 2.1 and 2.2) and

Service Providers (see section 2.4).

Table 1: Credential Types and EAP Methods

Credential Type

EAP Method

Certificate

EAP-TLS [25]

SIM/USIM

EAP-SIM [20], EAP-AKA [21], EAP-AKA' [30]

Username/Password (with server side

certificates)

EAP-TTLS [28] with MSCHAPv2 [10]

Note: For the rest of this document “SIM” is used to refer to subscriber identity module / universal

subscriber identity module (SIM/USIM) capability.

2.1 Required AP Capabilities

When an AP indicates support for HS2.0, it shall support the following capabilities:

 WPA2-Enterprise.

 All EAP methods listed in Table 1.

 The Interworking information element, including its Venue Info and Homogeneous

Extended Service Set Identifier (HESSID) fields (defined in [2]); support for this element

mandates support for the generic advertisement service (GAS).

 The Roaming Consortium information element; see [2].

 Setting the Interworking bit in the Extended Capabilities information element; see [2].

 The BSS Load element; see [2]. This element contains information on the current mobile

device population and channel utilization in the BSS.

 The following ANQP-elements; see [2]:

o Internet Protocol (IP) address type availability

o Network Access Identifier (NAI) Realm

o 3GPP Cellular Network

o Domain Name

 The HS2.0 ANQP-elements (defined in section 4):

o Hotspot (HS) Query List

o HS Capability List

o Operator Friendly Name

o Wide Area Network (WAN) Metrics

o Connection Capability

o NAI Home Realm Query

o Online Sign Up (OSU) Providers List

o Icon Request

o Icon Binary File

Wi-Fi Alliance Hotspot 2.0 (Release 2) Technical Specification - Version 1.2 
© 2016 Wi-Fi Alliance. All Rights Reserved. 
Used with the permission of Wi-Fi Alliance under the terms as stated in this document. 
Page 20 of 207 
  The proxy address resolution protocol (ARP) service defined in section 5.3. The proxy 
ARP service has two purposes: 1) enabling the mobile device to remain in power save for 
longer periods of time, and 2) protecting against malicious behavior of an associated 
mobile device. 
  When the value of the Access Network Type field in the Interworking element is either 
Free Public Network or Chargeable Public Network, all traffic inspection and filtering 
operate according to the procedures specified in section 5.1. 
  The ability to disable downstream forwarding of group-addressed frames (i.e., multicast 
and broadcast frames) according to the procedures in section 5.2. 
  The ability to disable P2P cross connect (see [1]) by advertising the P2P Manageability 
attribute with the Cross Connection Permitted field value 0. 
  BSS Transition Management Request frame with the ESS Disassociation Imminent bit 
and Session Information universal resource locator (URL); see [2]. 
  The WNM-Notification Request Action frame (see section 3.2.1) 
  ANQP responses up to a size of 65535 octets. 
  The QoS mapping interworking services defined in subclause 10.24.9 of [2].  This 
includes the QoS Map Configure frame defined in [2]. 
  The ability to set the Additional Step Required for Access (ASRA) bit to 1, even though 
the value of dot11RSNAActivated may be true when a BSS advertises online sign up. 
  The Country element in Beacon and Probe Response frames, except where prohibited by 
regulatory rules. 
  The HS2.0 Release 2.0 AP shall be compliant with Release 1. 
  Management Frame Protection per [2]. 
  RADIUS vendor-specific attributes, as defined in Annex D. 
When an AP indicates support for HS2.0, it should have the following capability: 
  Support for Remote Authentication Dial In User Service (RADIUS) attributes, as 
recommended in [54]. 
When an AP indicates support for HS2.0, it may have the following capabilities: 
  Support for the following HS2.0 ANQP-element (defined in section 4): 
o  Operating Class Indication 
When an AP indicates support for HS2.0, it shall not use the following IEEE 802.11 security 
protocols: 
  Temporal key integrity protocol (TKIP)  
  Wired equivalent privacy (WEP) 
2.2 Required Mobile Device Capabilities 
When a mobile device associates to a BSS and includes the HS2.0 element in the 
(Re)Association Request frame, the mobile device shall support the following capabilities: 
  WPA2-Enterprise. 
  If the device has SIM/USIM credentials, it shall support all credential types and 
associated EAP methods listed in Table 1. 
  If the device does not have SIM/USIM credentials, it shall support certificates and 
username/password credential types and their associated EAP methods listed in Table 1. 
  The Interworking information element including the Venue Info and HESSID fields [2]. 
  The Roaming Consortium information element [2]. 
  Setting the Interworking bit in the Extended Capabilities information element [2]. 
  The BSS Load element; see [2].  This element contains information on the current mobile 
device population and channel utilization in the BSS. 
  Filtering of frames encrypted using the group temporal key (GTK), according to the 
procedures in section 6. 
  The following ANQP-elements; see [2]: 

剩余206页未读，继续阅读

BingoAmI

粉丝: 5
资源: 12

Wi-Fi CERTIFIED Passpoint R2 技术规格 v1.2：自动连接与数据卸载解决方案

OpenJDK14U-jdk_x64_windows_hotspot_14_36.msi

OpenJDK14U-jdk_x64_windows_hotspot_14_36.zip

OpenJDK14U-jdk_x64_linux_hotspot_14_36.tar.gz

Mikrotik-Script-Sync-Address-list_to_Hotspot_Ip-bindings:Mikrotik脚本

WFA_HS2-0_Technical_Specification_v1_0_0

jdk-7u80-nb-8_0_2-linux-x64

jdk-1_5_0_17-windows-x64

jdk-1_5_0_19-linux-i586.bin for linux

jdk-1._2-linux-i586

文本热点挖掘，基于DBSCAN聚类模型，对文本的热点事件进行挖掘_Text-hotspot-mining.zip

最新资源