Multi-link wireless communication security

A wireless communication device comprising:

• at least one modem;
• at least one processor communicatively coupled with the at least one modem;
• and
• at least one memory communicatively coupled with the at least one processor and storing processor-readable code that, when executed by the at least one processor in conjunction with the at least one modem, is configured to:
• transmit a beacon frame to a wireless station (STA) MLD, the beacon frame including a plurality of AP medium access control (MAC) addresses of respective APs belonging to the AP MLD;
• receive an association request from the STA MLD, the association request including a plurality of STA MAC addresses of respective STAs belonging to the STA MLD;
• generate, during a handshake operation with the STA MLD, one or more encryption keys configured to encrypt communications between the AP MLD and the STA MLD;
• and
• verify the plurality of STA MAC addresses based at least in part on the one or more encryption keys.

A method for wireless communication performed by a wireless station (STA) multi-link device (MLD), the method comprising:

• receiving a beacon frame from an access point (AP) MLD, the beacon frame including a plurality of AP medium access control (MAC) addresses of respective APs belonging to the AP MLD;
• transmitting an association request to the AP MLD, the association request including a plurality of STA MAC addresses of respective STAs belonging to the STA MLD;
• generating, during a handshake operation with the AP MLD, one or more encryption keys configured to encrypt communications between the AP MLD and the STA MLD;
• and
• verifying the plurality of AP MAC addresses based at least in part on the one or more encryption keys.

A wireless communication device comprising:

• at least one modem;
• at least one processor communicatively coupled with the at least one modem;
• and
• at least one memory communicatively coupled with the at least one processor and storing processor-readable code that, when executed by the at least one processor in conjunction with the at least one modem, is configured to:
• receive a beacon frame from an access point (AP) MLD, the beacon frame including a plurality of AP medium access control (MAC) addresses of respective APs belonging to the AP MLD;
• transmit an association request to the AP MLD, the association request including a plurality of STA MAC addresses of respective STAs belonging to the STA MLD;
• generate, during a handshake operation with the AP MLD, one or more encryption keys configured to encrypt communications between the AP MLD and the STA MLD;
• and
• verify the plurality of AP MAC addresses based at least in part on the one or more encryption keys.