Method and communication system for configuring security information in WLAN

A method for sharing a device key between a mobile terminal and a device communicating with an access point (AP), the method comprising:

• transmitting a device key configuration request message to a device communicating with an access point (AP);
• receiving a device key configuration response message from the device, the device key configuration response message comprising network information of the device;
• generating the device key based on a stored private key, a count, and the received network information of the device;
• and
• transmitting a device key configuration information message comprising the generated device key.

A method for sharing a device key between a device communication with an access point (AP) and the AP, the method comprising:

• sending a WPA configuration request message, the WPA configuration request message comprising a randomly generated random 1, a MAC address of a device communicating with an access point AP, and a count;
• receiving an authentication WPA configuration request message, the authentication WPA configuration request message comprising a first one-directional function operation value obtained by applying the random 1 to one-directional function operation, and a randomly generated random 2;
• and
• when a value obtained by applying the random 1 to the one-directional function operation is equal to the first one-directional function operation value, sending an authentication WPA configuration response message, the authentication WPA configuration response message comprising a second one-directional function operation value obtained by applying the received random 2 to the one-directional function operation.

A method for a mobile terminal to instruct a device communicating with an access point (AP) to discard a stored device key, the method comprising:

• sending a device key discard request message, the device key discard request message comprising a randomly generated random a and network information of an access point (AP);
• receiving an authentication device key discard request message, the authentication device key discard request message comprising an a-th one-directional function operation value obtained by applying the random a and a pre-stored device key to one-directional operation, a randomly generated random b, and network information of the device;
• generating the device key using a stored private key and the received network information of the device;
• and
• sending an authentication device key discard response message when a value obtained by applying the generated device key and the random a to the one-directional operation is equal to the a-th one-directional function operation value, the authentication device key discard response message comprising a b-th one-directional function operation value obtained by applying the received random b to the one-directional function operation.

A method for a mobile terminal to instructing an access point AP communicating with a device to discard a stored device key, the method comprising:

• sending a WPA discard request message, the WPA discard request message comprising a randomly generated random c and network information of a device communicating with an access point (AP);
• receiving an authentication WPA discard request message, the authentication WPA discard request message comprising a c-th one-directional function operation value obtained by applying the random c and a pre-stored device key to one-directional operation, and a randomly generated random d;
• and
• when a value obtained by applying the pre-stored device key and the receiving random c to the one-directional operation is equal to the c-th one-directional function operation value, sending an authentication WPA discard response message, the authentication WPA discard response message comprising a d-th one-directional function operation value obtained by applying the received random d to the one-directional function operation.

A communication system comprising:

• a device;
• an access point (AP) communicating with the device;
• and
• a mobile terminal communicating with the device and the AP;
• wherein:
• a private key configuration request message is transmitted to the AP, the private key configuration request message comprising network information of the mobile terminal;
• a private key configuration response message is received from the AP, the private key configuration response message comprising network information of the AP;
• a private key corresponding to the network information of the AP is generated;
• and
• a private key configuration information message comprising the generated private key is transmitted.