1. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 1 Proposal for network selection cluster Notice: This document has been prepared to assist IEEE 802.11. It is offered as a basis for discussion and is not binding on the contributing individual(s) or organization(s). The material in this document is subject to change in form and content after further study. The contributor(s) reserve(s) the right to add, amend or withdraw material contained herein. Release: The contributor grants a free, irrevocable license to the IEEE to incorporate material contained in this contribution, and any modifications thereof, in the creation of an IEEE Standards publication; to copyright in the IEEE’s name any IEEE Standards publication even though it may include portions of this contribution; and at the IEEE’s sole discretion to permit others to reproduce in whole or in part the resulting IEEE Standards publication. The contributor also acknowledges and accepts that this contribution may be made public by IEEE 802.11. Patent Policy and Procedures: The contributor is familiar with the IEEE 802 Patent Policy and Procedures, including the statement "IEEE standards may include the known use of patent(s), including patent applications, provided the IEEE receives assurance from the patent holder or applicant with respect to patents essential for compliance with both mandatory and optional portions of the standard." Early disclosure to the Working Group of patent information that might be relevant to the standard is essential to reduce the possibility for delays in the development process and increase the likelihood that the draft publication will be approved for publication. Please notify the Chair as early as possible, in written or electronic form, if patented technology (or technology under patent application) might be incorporated into a draft standard being developed within the IEEE 802.11 Working Group. If you have questions, contact the IEEE Patent Committee Administrator at.http:// ieee802.org/guides/bylaws/sb-bylaws.pdfstuart.kerry@philips.compatcom@ieee.org Date: 17th Feb 2006 Authors:

2. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 2 Requirements Addressed ClusterRequirementAddressed or No Network SelectionN1 (Required)Addressed N2 (Required)Addressed N3 (Required)Addressed N4 (Required)Addressed N5 (Optional)Addressed N6 (Out of Scope)No N7 (Complete)No GeneralG1 (Required)Addressed G2 (Required)Addressed G3 (Required)Addressed

3. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 3 Requirement N1 N1: –“Define functionality by which a STA can determine whether its subscription to an SSPN would allow it to access a particular 802.11AN before actually joining a BSS within that 802.11 AN. Proposals must describe their consideration of scalability. ” Notes: – “It’s not acceptable for a STA to be required to attempt IEEE 802.1X authentication with all available networks until it finds one that works. Equally a solution is not practical if it requires every possible credential supplier to be listed in a beacon (due to scalability problems). The functionality needs to cover the case where the STA’s SSPN has no direct relationship with the 802.11 AN, but a direct relationship (r.g. a roaming agreement in case of cellular networks) with an SSPN that has a direct relationship with the 802.11 AN. Proposals are expected to provide both active (e.g. probe & response) and passive (e.g. beacon) mechanisms.”

4. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 4 Passive mechanism for N1 Due to scalability problems, we propose a beacon only list active SSPNs: –802.11AN can determine an active SSPN based on the history records. E.g. The SSPN that subscribed users access the 802.11 AN frequently. –802.11AN can specially add a new SSPN to the active SSPN list if a user subscribed to a new SSPN have been get access to the 802.11AN. We propose use SSID to identify an active SSPN. –SSID = hash (…, SSPN identifier)

5. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 5 Active Mechanism For N1 ‘Entrance’ for External Network Information Discovery –We propose a new entity ‘entrance’ to 802.11 DS that will be in charged with external network information discovery. AP can get external network information such as roaming-agreement SSPNs by entrance. Contain-IE used for general information encapsulation in 802.11 Management frame, such information example: –SSPN identifier –MIH IE (Media independent Handover Cluster)

6. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 6 Container-IE Element IDLength (Octets) Information TBD?E.g. MIH IE, SSPN Identifier, etc. can be included in this field.

7. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 7 Entrance entity first addressed in IEEE802.11/0850r5 DSM AP Entrance AP STA1STA3 AS/ proxy GW AS SSPN Local Network GW

8. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 8 Entrance for external network information discovery STAAPEntrance External Network Information Server 1) External Network Discovery Request 2) Information Query Request Information Query 3) Information Query Response 4) External Network Discovery Response 1)STA send ‘external network discovery request’ by Probe request to find out whether its subscription to a SSPN would allow it to access a particular 802.11AN; 2)AP then send “information query request” to an entrance to find out the roaming- agreement between the local network and the SSPN; 3)Entrance then visit external information server to get those information and then response AP by ‘Information Query Response’; 4)AP then response STA by ‘External network discovery Response’ with the result that whether the AN can or not to allow a SSPN’s subscriber to access this 802.11 AN.

9. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 9 External Network Discovery based on probe request/response Container-IE is used for encapsulate the external network discovery request/response. Probe request and probe response frame can includes container-IE. AP can only transfer container-IE to entrance for information query and entrance can only transfer container-IE for response to AP. Element IDLength (Octets) External Network Discovery IE SSPN Identifier … TBD?1variable?

10. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 10 Requirement N4 N4: –“Define functionality by which a STA can determine which interworking services are available before joining a BSS. ” Notes: –“A classic example is whether internet access is provided (some open networks might exist only to give access to a local serve) but the style of interworking may also be significant – is tight or loose coupling provided? Is access to IMS in the SSPN provided? See 11-05/1595r0 for more on this subject.”

11. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 11 Inter-Working Service Clarification Inter-working service types that usually defined by other organizations: –3gpp/3gpp2 scenarios that defines the inter-working types between 3gpp and WLAN (includes loose and tight case) –UMA (tight case) We propose to use an OUI format to identify an inter- working type: Inter-working type should be included in network discovery request/response message for N4. OUI (3 octets) type (1 octets)

12. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 12 Requirement N5 N5: –“Functionality shall be provided by which APs can advertise (before connection) the charges that will be made for use of the network if connection is authorized based on an SSPN subscription. ” Notes: –“This is thought to probably be impractical, but the group is willing to listen to proposals.”

13. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 13 Proposal for N5 We think TGu only need to give a mechanism to transfer the charges information, but don’t need to understand what it means. We propose to use Container-IE to encapsulate those charge information.

14. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 14 Requirement N2 N2: –“The mechanism described in requirement R9N1 must allow a STA that has multiple credentials with an SSPN to select the correct credentials when authenticating with a Local Network. ” Notes: –“This requirement considers the case where a user has more than one set of credentials associated with a single SSPN user identity. It is assumed that the AP will be able to some piece of information that allows the mechanism of requirement R9N1 to provide this to the STA, and for the STA to then use it to select the correct credentials to use. There has been a fair amount of debate about whether this is a realistic scenario, but all a proposal has to do is describe how the information (if existing) would be deliverd to the STA. ”

15. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 15 One Scenario related N2 A Chinese operator maybe issue two credentials for a user to access WLAN: one for Chinese WAPI standard, and one for WPA standard. A WLAN may support: – WAPI/WPA dual mode –WAPI only –WPA only A STA can select correct credential according security related information: RSN IE (802.11i Standard) and/or WAPI IE (Chinese Standard). And in this scenario don’t require any other additional information.

16. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 16 Requirement N3 N3: –“Define functionality to support authentication with multiple SSPNs through a single AP.” –Notes: “ It’s not acceptable to require a seprate “virtual” AP for each SSPN. Note that this is not a requirement that a STA be able to use multiple SSPNs simultaneously – that comes later. This is just saying that a single AP can have a population of STAs where some are using one SSPN, and some another one.”

17. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 17 Proposal for N3: AP sharing architecture BSS/AP (BSSID#1) ESS (ESSID#1) ESS (ESSID#2) SSPN (#1) SSPN (#2) SSPN (#3) This sharing architecture are first addressed in IEEE802.11-05/1169r0. By this sharing architecture, SSPN have no directly relationship with BSS/AP layer. When an 802.11 link have been created, a binding relationship will also created dynamically to determine a path from BSS to SSPN for a specific STA. ESSID is defined to identifier an ESS. We propose use a MAC address as ESSID. SSID#1SSID#2SSID#3SSID#4

18. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 18 Binding relationship Creation between SSPN and ESS The Binding relationship is created just when association or link is created. We propose a Path-IE that used to transfer the binding relationship from AP to STA by association response. Path-IE definition: In Path-IE, SSID is used to indicate the binding relationship between a SSPN and ESS. – SSID = hash (“Service Set Identifier”, ESSID, SSPN identifier) Element IELengthESSIDSSID

19. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 19 Path-IE for network selection in Handover Case STA AP Beacon: Path-IE, Path-IE, … (1) Passive Discovery STA AP Probe-Response: Path-IE Probe-Request: Path-IE (2) Active Discovery STA select the network that have the same ESSID and SSID to handover.

20. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 20 Path-IEs that share the same ESS can be grouped in one IE In beacon frame Path-IEs that share the same ESS can be grouped in one IE In beacon frame: Element IELengthESSIDSSID numbers (N) SSIDs (1~N)

21. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 21 Proposal Summary for N1, N3, N4, N5 Passive/Active mechanism. New entity ‘entrance’ for external information services. AP sharing based on ESS that identified by ESSID and SSID can be used to identify a SSPN: –SSID = hash (“Service Set Identifier”, ESSID, SSPN identifier). Container-IE

22. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 22 G1: Minimize battery consumption for Mobile device In this proposal, Beacon can broadcast Path-IE that indicates an active SSPN, that will speed the network selection procedure, minimize the battery consumption for mobile device.

23. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 23 G2: Security Impact Beacon and Probe request/response frames are unprotected even in 802.11w. But maybe we can protect some IEs e.g. container-IE in these management frames. –IE protection requirements: E.g. Integrity ? –Is it in the scope of TGu for IEs protection?

24. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 24 G3: Allow APs to serve legacy STAs Beacon –Legacy STAs will ignore any IEs that defined by TGu Probe Request from Legacy STA –AP don’t do any extra process when no IEs defined by TGu included in Probe Request. Association Request from Legacy STA –AP don’t do any extra process when no IEs defined by TGu included in Association Request.

25. doc.: IEEE 802.11-06/0273r0 Submission February 2006 Zhonghui Yao, HuaweiSlide 25 Thank You!