Hardware control interface for IEEE standard 802.11 including transmission control interface component and a transmission status interface component

[0001] 1. Field of Invention

[0002] The techniques described herein relate to wireless network communication, and in particular to a hardware control interface for IEEE standard 802.11.

[0003] 2. Discussion of Related Art

[0004] Computers are sometimes configured to communicate wirelessly with other devices using radio frequency messages that are exchanged in accordance with IEEE standard 802.11. To send and receive wireless messages, software running on a computer communicates with a driver, which is software running on the computer that is specially configured to control a particular wireless network adapter to engage in wireless communication. Wireless network adapters that conform to IEEE standard 802.11 include a radio that transmits and receives radio frequency messages.

[0005] Applicants have developed a standardized hardware control interface for IEEE standard 802.11 that can be used with any of a variety of different types of 802.11 network adapters and 802.11 software drivers. Previously, a hardware-specific driver needed to be developed for each type of network adapter, including a hardware-specific hardware control interface to control a particular network adapter. By standardizing the hardware control interface for IEEE standard 802.11, the design of software drivers and network adapters may be simplified. Software drivers may be designed such that the information that they exchange with a network adapter conforms to the standardized host control interface. Network adapters may be designed such that the information they exchange with a software driver conforms to the standardized host control interface. As a result, system reliability may be improved.

[0006] In some embodiments, a hardware control interface may include four “core” interface components, including for example a transmission control interface component, a transmission status interface component, a reception control interface component and a channel switching interface component. However, the invention is not limited in this respect, as in some embodiments different numbers and/or types of interface components may be used.

[0007] One embodiment relates to a computer that includes processing unit including at least one processor and driver module that executes on the processing unit. The driver module may include a hardware control interface having at least a transmission control interface component configured to provide transmission control information to a network adapter to control the network adapter to communicate in accordance with IEEE standard 802.11. The transmission control information may include a first field including at least one flag, each one of the at least one flag representing transmission-related information, a second field that includes transmission rate information, a third field a third field that includes arbitration inter-frame space number information and a fourth field that includes contention window information.

[0008] Another embodiment relates to a computer system that includes a driver module that at least partially controls a network adapter to engage in wireless communication in accordance with IEEE standard 802.11. In the computer system, a computer-readable medium has computer-executable instructions, which, when executed, perform a method that may include providing transmission control information to the network adapter via a transmission control interface component. The transmission control information may include a first field including at least one flag, each one of the at least one flag representing transmission-related information, a second field that includes transmission rate information, a third field a third field that includes arbitration inter-frame space number information and a fourth field that includes contention window information.

[0009] Yet another embodiment relates to a method of developing a driver. The method may include analyzing a hardware control interface developed by a first developer entity that is independent of second developer entity which is developing the driver module. The hardware control interface may be configured to provide transmission control information to a network adapter to control the network adapter to engage in IEEE 802.11 communication. The transmission control information may include a first field including at least one flag, each one of the at least one flag representing transmission-related information, a second field that includes transmission rate information, a third field a third field that includes arbitration inter-frame space number information and a fourth field that includes contention window information. The method may further include designing a driver to at least partially control the network adapter via the hardware control interface to engage in communication in accordance with IEEE standard 802.11.

[0021] As discussed above, some computers are configured to engage in wireless communication using a specially-designed driver that controls a network adapter to communicate according to IEEE standard 802.11. Previously, each driver was specially designed to function with a single type of network adapter. As a consequence, a different type of software driver has been provided to control each different type of network adapter. Different developers might design their drivers and/or network adapters differently, resulting in different information being exchanged between them. Additionally, a developer might design one driver to function with a particular model of network adapter and another driver to function with a different model, as different network adapter models might have different specifications. For example, different network adapter models might be configured to engage in wireless communication at different speeds. One network adapter might be capable of communicating at a relatively low speed (e.g., in accordance with IEEE Standard 802.11b), but a different network adapter may be capable of communicating at a relatively high speed (e.g., in accordance with IEEE Standard 802.11g). As a result, previous interfaces between drivers and network adapters might be different depending on the requirements of a particular network adapter.

[0022] Applicants have appreciated that a variety of problems may arise from providing hardware control interfaces that are specialized to a particular type of network adapter. As one example, creating new drivers for each different type of network adapter may be expensive and time-consuming for network adapter developers, as they may need to develop and test the network adapters with their drivers for each new network adapter released. As another example, specialized hardware control interfaces are sometimes not designed adequately to perform at the speeds required by IEEE standard 802.11, particularly when control information is exchanged over a serial bus (such as a universal serial bus), possibly causing the driver to crash.

[0023] Applicants have developed a standardized hardware control interface for network adapters that communicate according to IEEE standard 802.11. Providing a standard hardware control interface may simplify network adapter and software driver development. As a result, network adapters may be designed to function with a standardized hardware control interface, relieving network adapter developers of the need to provide such an interface and increasing software driver reliability.

[0024] FIG. 1 is a block diagram illustrating an example of a computing environment 1, according to some embodiments. Computing environment 1 includes a computer 2 that runs software module 3 and a driver module 4. Driver module 4 includes a hardware control interface 5 having a plurality of interface components (a, b and c) for interfacing with a network adapter. Computing environment 1 also includes a network adapter 6 having a radio 7 for engaging in wireless radio frequency communications.

[0025] Software module 3 may engage in network communication over a wireless network via driver module 4. Driver module 4 may send and/or receive one or more control messages with network adapter 6, which controls radio 7 to engage in wireless radio frequency communications, including the sending and/or receiving of a wireless message. Using radio 7, network adapter 6 may enable computer 1 to communicate with another wireless-enabled device. It should be appreciated that network adapter 6 may engage in wireless communication with any suitable device, as the techniques described herein are not limited in any way by the device with which wireless communication is performed.

[0026] Computer 2 may be any suitable type of computing device that includes at least one processor. By way of example and not limitation, computer 1 may be a laptop computer, a desktop computer, a cellular telephone or a personal digital assistant. In some embodiments, the at least one processor processors may have an operating system that executes thereon. Software module 3 may be any suitable software that executes on the processing unit. In some embodiments, software module 3 may be a portion of the operating system configured to support network communications, but the invention is not limited in this respect. As one example, software module 3 may be a portion of the TCP/IP (Transport Control Protocol/Internet Protocol) stack.

[0027] Software module 3 may engage in network communication by exchanging information with driver module 4. Driver module 4 may be a software module that executes on a processing unit of computer 2, and may be configured to control a network adapter to engage in wireless communications in accordance with IEEE standard 802.11. Driver module 4 may exchange control signals with network adapter 6 via a hardware control interface 5. Hardware control interface 5 may be a portion of driver module 4 that is configured to exchange control information with network adapter 6 for wireless communications according to IEEE standard 802.11, as discussed in further detail below. Network adapter 6 may include hardware, firmware and/or software configured to exchange control information with driver module 4 via hardware control interface 5. At least partially based on the control information exchanged with driver module 4, network adapter 6 may send and/or receive data via a wireless medium by controlling radio 7 to transmit and/or receive wireless messages in accordance with IEEE standard 802.11.

[0028] In one embodiment, hardware control interface 5 may be a standardized hardware control interface. The term “standardized” means that the hardware control interface is configured to exchange control information with a plurality of different types of network adapters. Thus, any of a variety of different network adapters may be configured to exchange information with driver module 4 using hardware control interface 5. Hardware control interface 5 may be network adapter independent, such that hardware control interface 5 is suitable for operating with any suitable type of network adapter. Providing a standardized hardware control interface may simplify network adapter design, development and testing and increase network adapter reliability, which are key benefits to a standardized hardware interface in some embodiments.

[0029] Hardware control interface 5 may exchange information with network adapter 6 using any suitable type of data bus. Thus, in one aspect, hardware control interface 5 may be bus-independent such that it is capable of operating with any of a plurality of different bus types, such as a serial bus or a parallel bus.

[0030] Hardware control interface 5 may include one or more interface components, such as interface components 5a, 5b and 5c. In one aspect, a standard hardware control interface may include a relatively small number of interface components, such as less than fifty and/or less than ten. Providing a standard hardware control interface with a relatively small number of hardware control interface components may simplify driver and network adapter design compared with prior systems. Each network interface component may be configured to send and/or receive a portion (a “field”) of the control information exchanged with a network adapter, as will be discussed in further detail below.

[0031] In some embodiments, hardware control interface 5 may include a transmission control interface component 5a. The transmission control interface component 5a may be configured to provide transmission control information to network adapter 6 for the transmission of data (e.g., packets) on the wireless medium. Any suitable type of transmission control information may be provided, some examples of which are illustrated in FIG. 2.

[0032] FIG. 2 illustrates an example of transmission control information 20 that may be provided to network adapter 6 using transmission control interface 5a in accordance with one embodiment, although the invention is not limited the example illustrated in FIG. 2. The transmission control information may include one or more fields 21 of transmission control information 20 that the transmission control interface is configured to provide.

[0033] As illustrated in FIG. 2, a first field may include one or more flags that indicate a parameter of the data transmission. Any suitable types of flags may be used, such as a flag that indicates whether the wireless medium is to be held or released after transmission of a packet, whether acknowledgement is required for a wireless message, whether a packet is to be encrypted, the type of packet preamble to be used, and/or any other suitable type of flag that indicates any suitable transmission-related information. A flag may include a single bit or multiple bits. In one aspect, seven or more flags may be used, as illustrated in FIG. 2. However, it should be appreciated that any suitable number of flags may be used, as the techniques described herein are not limited in this respect.

[0034] As further illustrated in FIG. 2, a second field may include information relating to the transmission rate that is to be used by the network adapter. A third field may include arbitration inter-frame space number (AIFSN) information. A fourth field may include maximum and/or minimum contention window size information (CWmin, CWmax). A fifth field may include basic service set (BSS) information and/or peer table information. However, it should be appreciated that these are only examples of information that may be provided by transmission control interface component 5a to at least partially control network adapter 6, and the techniques described herein are not limited to the exchange of these particular types of information. In some embodiments, this information may be provided by transmission control interface component 5a in the same field and/or bit configuration and having the same order as illustrated in FIG. 2. However, exchange of other types of information and/or other data configurations are possible.

[0035] In some embodiments, hardware control interface 5 may include a transmission status interface component 5b configured to provide transmission status information to driver module 4 regarding the status of a transmission by the network adapter.

[0036] FIG. 3 illustrates an example of transmission status information 25 provided by network adapter 6 and received by a transmission status interface component 5b, although the invention is not limited to the example illustrated in FIG. 3. As discussed above with respect to transmission control interface component 5a, the transmission status interface component 5b may include one or more fields 36 of transmission status information 25 that the transmission status interface component 5b is configured to receive.

[0037] As illustrated in FIG. 3, a first field may include one or more flags related to the status of the transmission. Any suitable transmission status flags may be used, such as a flag that indicates the failure of transmission. A second field may include information about the number of times that the network adapter has attempted to re-transmit a packet. A third field may include transmission rate information indicating the data rate at which a packet was successfully transmitted. A fourth field may include information about the data rate at which an 802.11 acknowledgement frame (ACK frame) was received. A fifth field may include received signal strength information (RSSI) about the strength of the signal received by the network adapter. A sixth field may include information related to a noise floor of an 802.11 ACK frame. In some embodiments, this information may be provided to transmission status interface component 5b in the same field and/or bit configuration and having the same order as illustrated in FIG. 3. However, exchange of other types of information and/or other data configurations are possible.

[0038] In some embodiments, hardware control interface 5 may include a reception control interface component. The reception control interface component may be configured to receive reception control information from network adapter 6 for the reception of data. Any suitable type of reception control information may be provided.

[0039] FIG. 4 illustrates an example of reception control information 30 provided by network adapter 6 and received by a reception control interface component 5c, although the invention is not limited to the example illustrated in FIG. 4. As discussed above with respect to transmission control interface component 5a, the reception control interface component 5c may include one or more fields 31 of reception control information 30 that the reception control interface component 5c is configured to receive.

[0040] As illustrated in FIG. 4, a first field may include one or more flags that indicate a parameter of the data reception. Any suitable types of flags may be used, such as a flag that indicates whether a buffer (e.g., a reception buffer of network adapter 6) has overflowed, whether a reception error has occurred, whether an address has been matched, whether a key is available, whether decryption of a received packet has failed, whether the received packet is a probe response, and/or any other suitable reception related information. In one aspect, six or more flags may be used, as illustrated in FIG. 4

[0041] A second field may include information about the rate at which data is received by the network adapter 6. A third field may include information about the strength of the signal carrying the received data. A fourth field may include information about the noise floor, such as how much background noise is present on the wireless medium. A fifth field may include information indicating the channel on which a particular packet has been received. A fifth field may include information indicating a time at which a packet was received. However, it should be appreciated that these are only examples of information that may be provided to reception control interface component 5c by network adapter 6, and the techniques described herein are not limited to the exchange of these particular types of information. In some embodiments, this information may be received by reception control interface component 5c in the same field and/or bit configuration and having the same order as illustrated in FIG. 4. However, exchange of other types of information and/or other data configurations are possible.

[0042] Three examples of host control interface components have been described with respect to FIGS. 1-4. However, any of a variety of hardware control interface components may be used. One example is an interface component configured for the exchange of channel control information for switching between different channels. The channel control information may include a first field related to a band or channel, a second field that includes a power level for transmitting via a new channel and/or a third field that includes one or more transmission queue flags Another example of a hardware control interface component is an interface component configured to provide beacon transmission control information to network adapter 6 such that network adapter 6 transmits IEEE standard 802.11 beacon messages. Yet another example is an interface component configured to exchange power control information with network adapter 6. Further illustrative interface components are described in further detail below in the section entitled “Example 1.”

[0043] As discussed above, one embodiment is directed to employing a standardized hardware control interface for use with IEEE standard 802.11 wireless communications. As used herein, the term IEEE standard 802.11 refers to the 802.11 family of standards. The techniques described herein may be used for any of these standards, including legacy IEEE standard 802.11, IEEE standard 802.11b, IEEE standard 802.11a, IEEE standard 802.11g, IEEE standard 802.11n or any other suitable 802.11 standard including those developed hereafter.

[0044] A computing system will now be described, on which embodiments of the invention may be implemented. With reference to FIG. 5, an exemplary system for on which embodiments of the invention may be implemented includes a computing device, such as computing device 40, which may be a device suitable to function as computer 2, for example. Computing device 40 may include at least one processing unit 41 and memory 42. Depending on the exact configuration and type of computing device, memory 42 may be volatile, non-volatile or some combination of the two. One possible configuration is illustrated in FIG. 5 by dashed line 43. Additionally, device 40 may also have additional features/functionality. Memory 42 is a form of computer-readable media that may store information such as computer-readable instructions, which, when executed, implement software module 3, driver module 4 and/or hardware control interface 5.

[0045] Device 40 may include at least some form of computer readable media. Computer readable media can be any available media that can be accessed by device 40. By way of example, and not limitation, computer readable media may comprise computer storage media and communication media. For example, device 40 may also include additional storage (removable and/or non-removable) including, but not limited to, magnetic or optical disks or tape. Such additional storage is illustrated in FIG. 5 by removable storage 44 and non-removable storage 45. Computer storage media includes volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Memory 42, removable storage 44 and non-removable storage 45 are all examples of computer storage media.

[0046] Device 40 may also include output device(s) 46, input device(s) 47 and/or one or more communication connection(s) 48. Communication connection(s) 48 may include, for example, a bus interface that enables device 40 to communicate with network adapter 6 via any suitable data bus, such as a parallel bus or a serial bus.

[0047] It should be appreciated that the invention is not limited to executing on any particular system or group of systems. For example, embodiments of the invention may run on one device or on a combination of devices. Also, it should be appreciated that the invention is not limited to any system or network architecture

[0048] One exemplary embodiment will now be described with respect to an illustrative hardware control interface specification. It should be appreciated that the illustrative specification is merely one possible implementation according to the techniques described herein, as the techniques described herein are not limited to those described in the following illustrative specification. Furthermore, although the following specification contains words such as “shall” and “must,” such words only apply to with respect to the illustrative specification below, as other embodiments are not so limited.

1 Definitions

[0049] Delayed PS-Poll

[0050] This is the case in which the AP replies a PS-Poll control frame with an 802.11 ACK control frame and transmits the buffered 802.11 data or management frame at a later time.

[0051] Device-sourced Packet

[0052] This is an outgoing packet generated by device itself. A device-sourced packet must be an in-BSS packet or a packet which doesn't have BSSID field.

[0053] Examples of device-sourced packets are in-BSS 802.11 probe responses (for the BSS which the device is transmitting beacons), 802.11 ACK, 802.11 RTS, 802.11 null data packets, etc.

[0054] Group Address

[0055] A group Address is a MAC address in which “I/G address bit” is set to 1. The definition of group address is orthogonal to “U/L address bit” and OUI type. Therefore, unless specifically mentioned otherwise, a group address can be either universally or locally administered. A universally administered group address can be either standard IEEE or proprietary.

[0056] For example, the following are all valid group addresses:

[0057]

FF:FF:FF:FF:FF:FF	All one's broadcast address (standard IEEE group
	address)
09:00:2B:00:00:04	Standard MAC group address used in ISO 9542
01:50:f2:00:00:01	Microsoft proprietary group address (Universally
	administered with Microsoft OUI)
03:01:02:03:04:05	A locally administered group address (OUI is
	not applicable)

[0058] Group BSSID

[0059] This is a BSSID using a group address.

[0060] Host-sourced Packet

[0061] This is an outgoing packet generated by host.

[0062] Immediate PS-Poll

[0063] This is the case in which the AP replies a PS-Poll control frame with a buffered 802.11 data or management packet.

[0064] In-BSS Packet

[0065] For packet which contains BSSID field, this is a packet with BSSID matching one of the BSS's in which the device has joined.

[0066] In-BSS concept is not applicable to packets which don't have BSSID field. At the time of this specification is written, 802.11 control packets don't have BSSID.

[0067] Individual Address

[0068] Also called unicast address

[0069] An Individual Address is a MAC address in which “I/G address bit” is set to 0.

[0070] Individual BSSID

[0071] This is a BSSID using an individual address.

[0072] Out-of-BSS Packet

[0073] For packet which contains BSSID field, this is a packet with BSSID not matching any BSS in which the device has joined.

[0074] Out-of-BSS concept is not applicable to packets which don't have BSSID field. At the time of this specification is written, 802.11 control packets don't have BSSID.

[0075] Retransmission Rate Adaptation

[0076] Retransmission Rate Adaptation is the capability of selecting a lower data rate when packet retransmission is needed.

[0077] Transmission Rate Adaptation

[0078] Transmission Rate Adaptation is the capability selecting the optimal or near optimal data rate for the first transmission of each packet. Transmission Rate Adaptation usually requires historical information.

[0079] Wildcard BSSID

[0080] A BSSID has value of FF:FF:FF:FF:FF:FF

[0081] Wildcard SSID

[0082] A zero length SSID

2 Assumptions

[0083] Little endian is assumed unless specified otherwise, that is, bit 0 is least significant bit and byte 0 is least significant byte.

3 MAC Sub-layer Functions

[0084] This section describes the HCI's implementation of MAC Sub-layer functions. For each section here, there is one corresponding section in section 9 in the IEEE 802.11 specification.

[0085] 3.1 MAC Architecture

[0086] N/A

[0087] 3.2 DCF

[0088] Device performs DCF procedure using host supplied DCF parameters, such as AIFSN, ECWmin and ECWmax, on a per-packet basis. DCF parameters are passed to device in TxDescriptor (section 7.4).

[0089] For non-QoS packets, host set AIFSN to 2. Here, 2 comes from DIFS=2×aSlotTime+SIFS. For QoS packet, host set AIFSN according to the packet AC (Access Category). Device can calculate AIFS as AlFSN×aSlotTime+SIFS.

[0090] This design makes the packet access category transparent to device while at the same time give host the flexibility to tune DCF timing parameters. When timing parameters are set properly, this design is compatible to with IEEE 802.11 specification, including other timing parameters derived from SIFS/DIFS/AIFS. For example, according to section 9.2.3.5 in the IEEE 802.11 Specification, “. . . Reception of an error-free frame during the EIFS or EIFS−DIFS+AIFS[AC] resynchronizes the STA to the actual busy/idle state of the medium, so the EIFS or EIFS−DIFS+AIFS[AC] is terminated and normal medium access . . . ”

[0091] For normal packet, if host set AIFSN to 2, AIFS will essentially equal to DIFS. Therefore, EIFS−DIFS+AIFS[AC] equals to EIFS.

[0092] Regardless of whether device supports QoS, device shall allow host to control DCF parameters on a per-packet basis.

[0093] 3.2.1 RTS/CTS

[0094] Host is responsible for choosing RTS/CTS on a per-packet basis. The information is passed to device in TxDescriptor (section 7.4). “RTS Protection Bit” will be set to 1 when RTS is need.

[0095] 3.2.2 RTS with Fragmentation

[0096] Host is responsible for choosing RTS/CTS and performs fragmentation on a per-packet basis. The information is passed to device in TxDescriptor (section 7.4). Specifically, for this particular situation,

• • [0097] Hold Medium Bit in TxDescriptor will be set to 1. This tells device to hold the wireless medium and transmit the next frame within SIFS interval.
  • [0098] RTS Protection Bit in TxDescriptor will be set to 1. This tells device to invoke RTS/CTS procedure before the transmitting the packet.
  • [0099] No ACK Bit is usually set to 0 unless BlockACK is being used.

[0100] Device shall ensure the proper on-air behavior as defined in section 9.2.5.6 in the IEEE 802.11 Specification.

[0101] 3.3 Fragmentation

[0102] Host is fully responsible for performing fragmentation. When fragmentation is used,

• • [0103] Hold Medium Bit in TxDescriptor will be set to 1. This tells device to hold the wireless medium and transmit the next frame within SIFS interval.
  • [0104] No ACK Bit is usually set to 0 unless BlockACK is being used.

[0105] Device is required for ensuring the SIFS interval requirement which is defined in the IEEE 802.11 specification.

[0106] 3.4 Defragmentation

[0107] Host is fully responsible for performing defragmentation.

[0108] 3.5 Multirate Support

[0109] Case 1 Device doesn't support transmission and retransmission rate adaptation

[0110] This is the case where device clears both Bit 0 and Bit 1 in TxCapabilities field in GlobalCapability defined in section 7.2.1.

[0111] Host chooses data rate for the first transmission as well as retransmissions. Host also determines the maximum number of retransmissions which device shall perform. The information is passed to the device in TX descriptor (section 7.4). Host usually will request device to report status of the transmissions. For USB device, this is done by setting TxId field to a non zero value in NWF_USB_MSG_TX_PACKET (section 8.3.1). Upon transmission completion, device reports to the host the number of retransmission performed in TXStatus (section 7.5). That information, along with other information such as RSSI, will be used for adjusting data rates for the subsequent transmissions.

[0112] Case 2 Device doesn't support transmission rate adaptation, but it supports retransmission rate adaptation

[0113] This is the case where device clears Bit 0 and sets Bit 1 in TxCapabilities field in GlobalCapability defined in section 7.2.1.

[0114] In this case, host determines the maximum number of retransmissions and the data rate for the first transmission. Device is responsible for selecting the retransmission data rates. The host controlled information is passed to the device in TX descriptor (section 7.4). Device should use the retransmission data rates in TX descriptor to determine the maximum number of retransmissions by counting the number of non-zero data rates. It can ignore the actual data rate values and use its own retransmission rates.

[0115] Host usually will request device to report status of the transmissions. For USB device, this is done by setting TxId field to a non-zero value in NWF_USB_MSG_TX_PACKET (section 8.3.1). Upon transmission completion, device reports to the host the number of retransmission performed in TXStatus (section 7.5). That information, along with other information such as RSSI, will be used for adjusting data rates for the subsequent transmissions.

[0116] Case 3 Device support transmission and retransmission rate adaptation

[0117] This is the case where device sets both Bit 0 and Bit 1 in TxCapabilities field in GlobalCapability defined in section 7.2.1.

[0118] In this case, host determines the maximum number of retransmissions. Device is responsible for selecting the transmission and retransmission data rates. Device should use the data rate array in TX descriptor (section 7.4) to determine the maximum number of retransmissions by counting the number of non-zero data rates. It can ignore the actual rate values and use its own values.

[0119] Upon transmission completion, device is expected to report TX status information including TX success/failure, retransmission count, and the data rate of the last (re)transmission, etc. Host uses this information for determining whether roaming is needed.

[0120] Case 4 Device support transmission rate adaptation, but it doesn't support retransmission rate adaptation

[0121] This case may not be supported. If device supports transmission rate adaptation, it must also support retransmission rate adaptation.

[0122] Regardless of device rate adaptation capabilities, BSSEntry (section 7.7.1) in device's BSSTable contains the basic data rate for the BSS. The basic data rate information is used by device for choosing data rate for device sourced packets such as 802.11 ACK.

[0123] 3.6 MSDU transmission restrictions

[0124] When transmitting packets, device shall preserve the order of packets in which they are submitted to the device's transmission queues (section 6.2.2).

[0125] When indicating packets to the host, device shall preserve the order of packets in which they are received from the air.

[0126] 3.7 Operation across regulatory domains

[0127] Device has a default regulatory domain and SupportedRegDomains (see section 7.2.3) stored in a device specific persistent storage. At initialization time, device should set the current regulatory domain to its default regulatory domain. Host can query the default regulatory domain and SupportedRegDomains. If needed, host can change device's current regulatory domain. Device has only one current regulatory domain even though it may join multiple BSS operating in different regulatory domains.

[0128] Device is responsible for all the regulatory compliance requirements except for the following:

• • [0129] 1. For host-sourced packets, host selects transmission power level on a per-packet basis. Host ensures that the requested transmission power level doesn't exceed the regulatory limit. Transmission power information is passed to device in TxDescriptor (section 7.4).
  • [0130] 2. Host is responsible for selecting the active scanning channels in a manner that is compliant to the current regulatory domain.
  • [0131] 3. For device-sourced packets, device should use the transmission power level defined in CurrentChannel.TxPowerIndex (see section 7.9.2 for details).

[0132] 3.8 HCF

[0133] This section is applicable only when device set Bit 0 in QoSCapabilities field in GlobalCapability defined in section 7.2.1.

[0134] 3.8.1 EDCA

[0135] EDCA is based on DCF. This HCI design doesn't differentiate DCF and EDCA since host can supply ECWmin, ECWmax and AIFSN parameters. See DCF (section 3.2) and TxDescriptor (section 7.4) for details.

[0136] This design requires device to support 5 transmission queues (see section 6.2.2 for details). Host will put packets into appropriate transmission queues based on the access category of the packets. However, device must always use the DCF/EDCA parameters in TxDescriptor (section 7.4). It must not calculate EDCA/DCF timing parameters based on the transmission queue which the packets are in.

[0137] 3.9 Block Acknowledgement (BlockAck)

[0138] This section is applicable only when device set Bit 0 in QoSCapabilities field in GlobalCapability defined in section 7.2.1.

[0139] Host is fully responsible for setting up, updating and tearing down BlockACK agreement with the peer.

[0140] When transmitting packets to peer with which there is a BlockACK agreement, host determines whether BlockACK should be used on a per-packet basis. This information is passed to device in TxDescriptor (section 7.4). Specifically, the following bits are set in TxDescriptor

• • [0141] Hold Medium Bit is set to 1. This tells device to hold the wireless medium and transmit the next frame within SIFS interval.
  • [0142] No ACK Bit is set to 1. This tells device not to wait for 802.11. ACK before transmitting the next packet.

[0143] For details of BlockACK operations, see section 6.2.6 for BlockACK transmission and section 6.1.3, 6.1.5 and 6.1.6 for reception.

[0144] 3.10 No Acknowledgement (No Ack)

[0145] This section is applicable only when device set Bit 0 in QoSCapabilities field in GlobalCapability defined in section 7.2.1.

[0146] Host determines whether ACK is needed on a per-packet basis. This information is passed to device in TxDescriptor (section 7.4). Specifically, the following bits are set in TxDescriptor

• • [0147] Hold Medium Bit is set to 1. This tells device to hold the wireless medium and transmit the next frame within SIFS interval.
  • [0148] No ACK Bit is set to 1. This tells device not to wait for 802.11 ACK before transmitting the next packet.

[0149] As we can see here, NoACK operation is same as BlockACK operation from the device's point of view. The difference is in the host side. With BlockACK setup, host will place a BlockACKReq at the end of packet queue.

[0150] For details of NoACK operations, see section 6.2.6 for BlockACK transmission and section 6.1.3, 6.1.5 and 6.1.6 for reception.

[0151] 3.11 Frame exchange sequences

[0152] N/A

[0153] 3.12 Protection mechanism for non-ERP receivers

[0154] Host determines whether and how protection should be used on a per-packet basis. The protection information is passed to the device in TX descriptor (section 7.4). The host may choose to use either RTS/CTS or CTS-to-Self. Specifically,

• • [0155] RTS Protection Bit is set to 1 when RTS/CTS protection is needed
  • [0156] CTS Protection Bit is set to 1 when CTS-to-self protection is needed
  • [0157] Host ensures that RTS Protection Bit and CTS Protection Bit will not be both set to 1 on the same packet.
    4 MIME SAP interface

[0158] This section describes the HCI's implementation of MLME SAP interface. For each section here, there is one corresponding section in section 10.3 in the IEEE 802.11 specification.

[0159] 4.1 Scan

[0160] Host is fully responsible for performing scanning. Host may require device to perform the following actions during scanning:

• • [0161] 1. Suspend Transmission Queue
    • [0162] See section 6.2.2 for more information about transmission queue management.
  • [0163] 2. Suspend Automatic Beacon Transmission (if the system is operating as an IBSS node or an 802.11 access point)
    • [0164] See section 6.3 and 7.6 for more information about beacon generation.
  • [0165] 3. Switch Channel
    • [0166] See section 7.9.2 for channel switching.
  • [0167] 4. Transmit 802.11 probe request packets (if active scanning is needed)
    • [0168] See section 6.2, 7.4, and 7.5 for packet transmission.
  • [0169] 5. Resume Transmission
    • [0170] See section 6.2.2 for more information about transmission queue management.
  • [0171] 6. Resume Automatic Beacon Transmission
    • [0172] See section 6.3 and 7.6 for more information about beacon generation.

[0173] 4.2 Synchronization (Join)

[0174] Host joins a BSS by adding a BSSEntry (section 7.7.1) in the device BSSTable. The BSSEntry can be used by device for synchronizing its TSF timer with the BSS.

[0175] Device must complete adding BSSEntry into BSSTable as soon as possible without waiting for receiving 802.11 beacon/probe response from the BSS. Therefore, there could be a short period in which host exchanges 802.11 management and data packets with the BSS without proper synchronization (assuming that scanning happens long time ago and hence LastBssTime and LastLocalTime become outdated).

[0176] Note: when operating as an infrastructure STA, host may not add BSSEntry into the device. When this happens, from device's perspective, “join” is skipped.

[0177] 4.3 Authenticate

[0178] Host is fully responsible for performing authentication procedure. There is no special requirement on device. Device is not aware of authentication state.

[0179] Device must not assume that joining always occurs before authentication.

[0180] 4.4 Deauthenticate

[0181] Host is fully responsible for performing deauthentication procedure.

[0182] 4.5 Associate

[0183] Host is fully responsible for performing association procedure. There is no special requirement on device. Device is not aware of association state.

[0184] Device must not assume host will always perform authentication before starting association.

[0185] 4.6 Reassociate

[0186] Host is fully responsible for performing reassociation procedure.

[0187] Device must not assume host will always perform authentication before starting reassociation.

[0188] 4.7 Disassociate

[0189] Host is fully responsible for performing disassociation procedure.

[0190] 4.8 Reset

[0191] Reset is not defined for device. However, host can request devices perform the following actions during host reset:

• • [0192] 1. Remove BSSEntry from device's BSSTable
  • [0193] 2. Remove PeerEntry from device's PeerEntry
  • [0194] 3. Remove BeaconGroupEntry from device's BeaconGroupTable

[0195] 4.9 Start

[0196] When operating as an 802.11 access point, host will periodically transmit 802.11 beacon frames using the host timer. The BssEntry (section 7.7.1) will contain the basic rate information of the infrastructure BSS to be started. However, the BSSID field in BssEntry may contain wildcard BSSID, in which case the device shall disable its BSSID filtering.

[0197] When starting an IBSS station, host will request the device to periodically transmit 802.11 beacon frames. The request is sent to the device via StartIBSSBeacon, defined in section 7.6.1. The BssEntry will contain the basic rate information of the infrastructure BSS to be started. The BSSID field will contain the BSSID of the new IBSS network (since the BssEntry is referenced by StartIBSSBeacon request).

[0198] 4.10 Channel Switch

[0199] See CurrentChannel (section 7.9.2) data structure for details.

[0200] 4.11 SetKeys

[0201] Pairwise keys are stored in PeerEntry (section 7.8.1). Host adds or updates the corresponding PeerEntry in the device PeerTable when it needs to set pairwise key.

[0202] Decryption group keys are also stored in PeerEntry. They are managed in a similar way as Pairwise keys. Decryption group keys are used for decrypting incoming broadcast or multicast packets.

[0203] Encryption group keys are stored in BSSEntry. Host adds or updates the corresponding BSSEntry when it needs to set encryption group key. Encryption group keys are used for encrypting outgoing broadcast or multicast packets.

[0204] Note:

• • [0205] 1. MIC key portion of TKIP-MIC key is always stored in host. MIC verification is done in host.
  • [0206] 2. Host doesn't always add keys into device. Device must indicate to the host all the received packets for which it can't find a decryption key.
  • [0207] 3. Even when host adds keys into device, it may not always add both pairwise key and group key for the same pair. It can happen that host adds pairwise keys to the device, but not group keys.

[0208] 4.12 DeleteKeys

[0209] To delete pairwise and decryption group keys, host deletes or updates a PeerEntry in the device-s PeerTable.

[0210] To delete encryption group key, host deletes or updates a BSSEntry in the device's BSSTable.

[0211] Note: deleting keys doesn't mean that the system is disassociating or deauthenticating from the peer.

[0212] 4.13 MIC (Michael) Failure Event

[0213] MIC key is always stored in host. Host is fully responsible for MIC verification and MIC failure detection.

[0214] 4.14 EAPOL

[0215] Host is fully responsible for EAPOL exchange.

[0216] Device must not assume that host will always perform association before starting EAPOL exchange.

[0217] 4.15 MLME-PeerKeyStart

[0218] Host is fully responsible for obtaining cipher keys.

[0219] 4.16 SetProtection

[0220] Host determines whether and how protection should be used on a per-packet basis. The protection information is passed to the device in TX descriptor (section 7.4).

[0221] 4.17 MLME-PROTECTEDFRAMEDROPPED

[0222] This is not applicable to device. Device shall indicate to host all the received packets for which it can't find cipher keys. Host will decide whether the packet should be dropped or not.

[0223] 4.18 TS management interface

[0224] Host is fully responsible for TS management.

[0225] 4.19 Management of direct link

[0226] Host is fully responsible for direct link management.

[0227] 4.20 Higher Layer Synchronization Support

[0228] Host is fully responsible for higher layer synchronization. Device is required to provide the local time (read from device's TSF timer) at which a packet is transmitted or received. The local time is passed to the device through TXStatus (section 7.5) or RXDescriptor (section 7.3).

[0229] 4.21 BlockACK

[0230] This section is applicable only when device set Bit 0 in QoSCapabilities field in GlobalCapability defined in section 7.2.1.

[0231] Host is fully responsible for setting up, updating and tearing down BlockACK agreement with the peer.

[0232] When transmitting packets to peer with which there is a BlockACK agreement, host determines whether BlockACK should be used on a per-packet basis. This information is passed to device in TxDescriptor (section 7.4). See section 6.2.6 for BlockACK transmission and section 6.1.3, 6.1.5 and 6.1.6 for reception.

5 MLME

[0233] This section describes the HCI's implementation of MLME functionalities. All level 2 sections here can be 1:1 mapped to level 2 sections in section 11 in the IEEE 802.11 specification. Wherever applicable, this section will refer to the corresponding HCI data structures.

[0234] 5.1 Synchronization

[0235] 5.1.1 TSF

[0236] When operating in IBSS mode, host will set the BSSID field in the BssEntry (section 7.7.1) to the IBSS network in which the host joins. Device is required to synchronize its TSF timer with the IBSS network.

[0237] When operating as an infrastructure STA, host doesn't require the device to synchronize its TSF timer with the BSS (host will use the host timer for power saving purpose). Therefore, the BSSID field in the BssEntry may contain wildcard address.

[0238] When operating as an IBSS STA, host will set the BSSID field in the BssEntry (section 7.7.1) to the IBSS network. Host system itself doesn't rely on the TSF synchronization. Setting the BSSID is mainly because some device implementation needs the TSF synchronization for implementing the distributed beacon mechanism defined in section 11.1.2.2 in the IEEE 802.11 Specification.

[0239] 5.1.2 Beacon Generation

[0240] When operating as an 802.11 access point, host will generate and transmit beacon frames at every TBTT Device is required to fill the Timestamp in the beacon frames with the device's TSF timer value.

[0241] When operating as an IBSS STA, host will request device to generate beacons at every TBTT The request is sent to the device via StartIBSSBeacon request (section 7.6.1).

[0242] 5.1.3 Probe Request Processing

[0243] See section 6.1.7.

[0244] 5.1.4 Probe Response and Host Sourced Beacon

[0245] See section 6.2.8.

[0246] 5.1.5 Scanning

[0247] See section 4.1.

[0248] 5.2 Power Management

[0249] 5.2.1 Power Management in an Infrastructure Network

[0250] 5.2.1.1 AP TIM Transmissions

[0251] Host is responsible for setting the DTIM and the partial virtual bitmap, in the beacon packets which the host transmits at every TBTT The partial virtual bitmap is described in section 7.3.2.6 in the IEEE 802.11 Specification.

[0252] 5.2.1.2 Power Management with APSD

[0253] Host is fully responsible for implementing APSD for both access point mode and 802.11 infrastructure client mode.

[0254] Host should ensure that the host timer is configured to the required resolution (millisecond level) to support A-APSD.

[0255] 5.2.1.3 AP operation during the CP

[0256] When operating as an 802.11 access point, host implements the following:

• • [0257] 1. Keep tracking of power management status for each currently associated STA
  • [0258] 2. Advertise APSD support in the beacon if device set Bit 0 in QoSCapabilities field in GlobalCapability defined in section 7.2.1.
  • [0259] 3. Process TSPEC and maintain APSD status for each currently associated STA
  • [0260] 4. Buffer MSDU or management frames destined for power saving STAs
    • [0261] a. Transmit buffered MSDU/management frames upon receiving PS-Poll
    • [0262] b. Transmit buffered MSDU/management frames when STA switches into active mode
    • [0263] c. Implement packet aging functionality
  • [0264] 5. Buffer broadcast/multicast MSDUs for which the Order bit in the Frame Control field is clear.
    • [0265] a. Transmit buffered frames upon DTIMs
    • [0266] b. Transmit buffered MSDU/management frames when all the associated STAs are in active mode
  • [0267] 6. Transmit 802.11 beacons at every TBTT with most recent partial virtual bitmap and DTIM.
  • [0268] 7. Transmit A-APSD packets at each scheduled ASPD service period
  • [0269] 8. Transmit U-APSD packets upon receiving trigger frames.

[0270] Device is required to indicate PS-Poll 802.11 control frame to the host. Device is not required to maintain power management status for each currently associated STA. Therefore, STA will lose packets which have already been posted in the transmission queue prior to the “active→power saving” transition.

[0271] 5.2.1.4 AP operation during the CFP

[0272] This is not applicable since this specification doesn't support PCF and/or HCCA.

[0273] 5.2.1.5 Receive operation for STAs in PS mode during the CP

[0274] When operating as an 802.11 infrastructure STA, host will implement the following:

• • [0275] 1. Host will request device to power on its radio whenever it is appropriate. The algorithm which the host uses is outside the scope of this document.
    • [0276] To power on the radio, host issues a set request on GlobalState (RadioPowerState field in section 7.9.1)
  • [0277] 2 When host detects that the bit corresponding to its AID is set in the TIM, it will post a PS-Poll 802.11 control packet to the device transmission queue to retrieve the buffered MSDU or management frame.
  • [0278] 3. Host will request device to put its radio into doze state whenever it is appropriate. The algorithm which the host uses is outside the scope of this document.
    • [0279] To doze the radio, host issues a set request on GlobalState (RadioPowerState field in section 7.9.1)
  • [0280] 4. Host will use host's timer for managing the radio power state. Device's TSF timer is not used.

[0281] 5.2.1.6 Receive operation for STAs in PS mode during the CFP

[0282] This is not applicable since this specification doesn't support PCF and/or HCCA.

[0283] 5.3 STA Authentication and Association

[0284] See section 4.3, 4.4, 4.5, 4.6 and 4.7.

[0285] 5.4 Block ACK Operation

[0286] Applicable only when device set Bit 0 in QoSCapabilities field in GlobalCapability defined in section 7.2.1.

[0287] See section 3.9, 3.10, 4.21, 6.2.6, 6.1.3, 6.1.5 and 6.1.6.

[0288] 5.5 Higher Layer Timer Synchronization

[0289] See section 4.20.

6 Packet Transmission and Reception

[0290] 6.1 General Packet Reception

[0291] In this section, receive path flow is described. Please refer to section 0 for the format of RxDescriptor. The following topics are covered.

• • [0292] Reception of corrupted packets
  • [0293] Promiscuous reception
  • [0294] 802.11 control packet reception
  • [0295] Address 1 Matching
  • [0296] Packet processing after address 1 matching
  • [0297] BSSID Matching
  • [0298] Key Table Lookup
  • [0299] Decryption

[0300] Receive path is designed with the following assumptions:

• • [0301] Defragmentation is done in host system
  • [0302] MIC verification in TKIP is done in host system
  • [0303] Immediate Block ACK may not be supported. Only delayed block ACK is supported.

[0304] Host can control five packet filtering behaviors through 4 filters (Duplicate Packet filtering and Address 1 Filtering are controlled by the same filter).

• • [0305] Corruption Packet Filtering (FilterDiscardCorruptedFrame)
    • [0306] When this filtering is enabled, device should not indicate corrupted packets (CRC32 error). This filtering is enabled by default.
  • [0307] Duplicate Packet Filtering (FilterDiscardDuplicateFrame)
    • [0308] When this filtering is enabled, device should not indicate duplicate packets.
    • [0309] Duplicate packets can be detected via Sequence Control field in the MAC header.
    • [0310] This filtering is enabled by default.
    • [0311] If device doesn't implement duplicate packet detection, it can ignore this filter.
  • [0312] Address 1 Filtering (FilterDiscardAddress1MismatchedFrame)
    • [0313] When this filtering is enabled, device should not indicate packets with a unicasted receiver address that doesn't match the device's current MAC address. This filtering is applicable to packets with a unicast receiver address. It is enabled by default.
  • [0314] 802.11 Control Frame Filtering (FilterDiscardControlFrame)
    • [0315] This filtering is applicable to 802.11 control frames, except PS-Poll, BlockACKReq and BlockACK frames. When it is enabled, device should not indicate 802.11 control packets to which this filtering is applicable. It is enabled by default.
  • [0316] BSSID Filtering (FilterDiscardBSSIDMismatchedDataFrame)
    • [0317] This filtering is applicable to 802.11 data frames only. It is enabled when BSSID field of any BssEntry contains a unicast address. When it is enabled, device should not indicate 802.11 data packets with a BSSID which can not be found in BssTable.

[0318] FIG. 6 is the flow chart of address 1 matching stage. The flow chart is for the purpose of illustrating the expected behavior. Implementation doesn't have to exactly follow the flow chart as long as it produces the same output. Microsoft specific operations are highlighted in red text and dash-style lines. Host will always perform packet duplicate detection logic. To pass address 1 matching stage, the Address 1 field in MAC header must contain either the device's current MAC address or a group address. Duplicate Packet Detection is optional. Host will always perform duplicate packet detection irrespective of whether it has been performed by the device or not.

[0319] 6.1.1 Reception Processing After Address 1 Matching

[0320] This section describes the processing logic after a packet passes Address 1 Matching stage. Error!

[0321] Reference source not found. 7 is the flow chart. Microsoft specific operations are highlighted in red text and dash-style lines. It is worth to point out the following:

• • [0322] 1. Device must indicate cipher-protected packets to the host system even when it is unable to find matching key. For such kind of packet indications, the device must set RxFlags.Bit3 (see section 0) in the Rx descriptor.
  • [0323] 2. Device must indicate packets which fail in decryption. For such kind of packet indications, the device must set RxFlags.Bit4 (see section 0) in the Rx descriptor. The device doesn't have to indicate the whole packet to the host system. Only the MAC header is needed. This is needed for the host system to increment appropriate per-station statistic counters.
  • [0324] MatchBSSID
    • [0325] This operation is done only on 802.11 data packets. It returns true when packet BSSID matches one of BssEntry in BssTable. Otherwise, it returns false. See FIG. 8 for details. Here the 802.11 data packets can have any combinations of FromDS and ToDS values. When performing BSSID filtering, devices are expected to retrieve packet BSSID from correct Address field (either Address2 or Address 3) based on FromDS to ToDS value. Note: FromDS/ToDS are only used for determining packet BSSID. It must not be used for packet filtering. Devices must expect to receive and process any data packets irrespective of network mode (infrastructure or ad hoc).
  • [0326] RxFindKey and Decrypt
    • [0327] RxFindKey operation looks up key which will be used for decrypting cipher-protected packets. Decrypt operation decrypt packets using key found by RxFindKey;
    • [0328] See section 6.1.2 for details on key lookup and decryption.
  • [0329] ProcessRxAfterMatchingAddr1
    • [0330] This is the operation in which the device processes packets which pass Address 1 test as defined above. It is described in section 6.1.1.

[0331] 6.1.2 Key Lookup

[0332] Pairwise keys and decryption group keys are stored in PeerEntry (section 7.8.1). Pairwise keys are used for encrypting and decrypting unicast packets. Decryption group keys are used for decrypting broadcast and/or multicast packets. FIG. 9 illustrates the key look up process. It returns the key index of the matching PeerEntry.

[0333] 6.1.3 Decryption

[0334] Decryption shall not remove cipher header or cipher trailer. Decryption shall not update 802.11 MAC header, e.g., resetting Protected bit in frame control.

[0335] 6.1.4 Immediate Block ACK RX

[0336] Immediate Block ACK may not be supported. The host will not advertise Immediate Block ACK capability when running in access point mode.

[0337] 6.1.5 Delayed Block ACK RX

[0338] This section is applicable only when device set Bit 0 in QoSCapabilities field in GlobalCapability defined in section 7.2.1.

[0339] Device must send an 802.11 ACK upon receiving an 802.11 BlockAckReq frame directed to the device's MAC address.

[0340] It is transparent to the device whether there is a block ACK agreement with the transmitter. The host is responsible for buffering packets during a block ACK transferring and processing ADDBA, DELBA, BlockAckReq and BlockAck packets. The device must be able to parse ACK policy subfield in the QoS header. If ACK policy subfield is set to Block ACK, the device must not send 802.11 ACK frame upon receiving the MPDU or MMPDU.

[0341] 6.1.6 No ACK RX

[0342] This section is applicable only when device set Bit 0 in QoSCapabilities field in GlobalCapability defined in section 7.2.1.

[0343] The device must be able to parse ACK policy subfield in the QoS header. If ACK policy subfield is set to No ACK, the device must not send 802.11 ACK frame upon receiving the MPDU or MMPDU.

[0344] 6.1.7 Probe Request Handling

[0345] Host and device reply to probe request frames using the following guidance:

• • [0346] 1. When the receiver address in probe request is an all-one broadcast address and device has started the IBSS beacon process, the device should reply the probe request with probe response, subject to the criteria defined in section 11.1.3.2 in the IEEE 802.11 specification. For example, one of the criteria is that the device shall not reply if it doesn't transmit beacon at the most recent TBTT Device should indicate this probe request to the host regardless of whether it replies or not.
  • [0347] 2. When the receiver address in probe request is not an all-one broadcast address, the device must not reply. Device should treat this probe request like normal 802.11 data and management frames. It should indicate it to the host if the packet passes address filtering test defined in section 6.1 in this specification.

[0348] 6.1.8 Probe Response and Beacon Handling

[0349] When the received packet is an 802.11 probe response or beacon and device can find a matching BSSEntry in device's BSSTable, device shall determine if it should accept the Timestamp (the BSSTime) in the received packet. Please see section 11.1.1.1 and 11.1.1.2 in the IEEE 802.11 specification regarding to accepting timing information for infrastructure and IBSS network.

[0350] If device determines that it should accept the Timestamp in the receive packet, it should update LastBssTime and LastLocalTime field in the corresponding BSSEntry.

[0351] 6.2 Packet Transmission

[0352] This section is applicable to both non-QoS and QoS capable devices although it is decribed in the context of QoS capable device. Obvious QoS specific descripton will not be highlighted. But they can be ignored for device that doesn't support QoS.

[0353] Device reports it supports QoS by setting Bit 0 QoSCapabilities field in GlobalCapability defined in section 7.2.1. For device that doesn't support QoS,

[0354] 6.2.1 Mac Header Management

[0355] This section is not applicable for device sourced packet. It defines the ownership of 802.11 MAC header fields for host sourced packets. If a field is owned by host, its value will be provided by the host. If a field is owned by device, its value should be provided by device.

[0356]

Field Name	Host	Device
FrameControl.Version	✓
FrameControl.Type	✓
FrameControl.Subtype	✓ (Except CF-Poll and	✓ (CF-Poll bit and
	CF-Ack bit)	CF-Ack bit only)
FrameControl.ToDS	✓
FrameControl.FromDS	✓
FrameControl.MoreFrag	✓
FrameControl.Retry		✓
FrameControl.PS	✓
FrameControl.MoreData	✓
FrameControl.Protected	✓
FrameControl.Order	✓
DurationID		✓
Address1	✓
Address2	✓
Address3	✓
SC.FragNo	✓
SC.SeqNo	✓	✓
Address4	✓
QoS	✓
Notes:
1. For non-null unicast QoS packets, host is responsible for filling SeqNo. Device must not source any such kind of packets because doing so can cause sequence number conflicts.
2. For all other types of packets, whenever applicable, device is responsible for filling SeqNo.

[0357] 6.2.2 Transmission Queue

[0358] If device clears Bit 0 in QoSCapabilities field in GlobalCapability defined in section 7.2.1, device is required to support one out-of-BSS transmission queue (Q0) and one in-BSS transmission queues (Q1). Otherwise, it is required to support one out-of-BSS transmission queue (Q0) and 4 in-BSS transmission queues (Q1, Q2, Q3 and Q4). See section 8.1.4 for mapping transmission queues into USB endpoints.

• • [0359] The priority order is Q0>Q1>Q2>Q3>Q4. Device must finish transmitting packets from high priority queue before it can transmit any packets from low priority queue.
  • [0360] Transmission queue Q1 to Q4 can be suspended. When a transmission queue is suspended, transmission shall be stopped on that queue.
  • [0361] CWmin, CWmax and AIFSN parameters are not associated with transmission queue. Host will supply CWmin, CWmax and AIFSN on a per-packet basis.
    • [0362] It is host responsibility to provide correct values for whole system to be compliant with 802.11 Specification. For example, the host will set AIFSN to 2 for non-QoS frame in order to set the DIFS correctly (DIFS=SIFS+2*SlotTime).
  • [0363] Host is responsible for assigning packets to appropriate transmission queue. Device shall not look for AC (access category) in the QoS header and change the assignment.
  • [0364] If there is sufficient space, transmission queue may hold multiple packets. Packets are always appended to the end of transmission queue.
  • [0365] Transmission queue flow control is specific to the underlying bus technology. See section 8.1.5 for flow control in USB.
  • [0366] The amount of memory resource assigned to each transmission queue is specific to device implementation. It must be large enough for
    • [0367] transmitting at least one full-sized MSDU or all the MPDUs belonging to the same MSDU
    • [0368] implementing the optional burst transmission See section 6.2.6 for burst transmission.
  • [0369] Note: device sourced packets must not reduce the transmission queue resource available to the host.

[0370] 6.2.3 Encryption

[0371] The host is responsible for key look up. Pairwise key is stored in PeerEntry. If encryption is needed, host will set “Encryption Bit” in TxFlags field in the TxDescriptor (section 7.4).

• • [0372] Pairwise key is stored in PeerEntry (section 7.8.1). When Address 1 is an individual address, the device shall perform encryption using pairwise key from the i-th PeerEntry in PeerTable.
  • [0373] Device doesn't have to set FrameControl.Protected bit to 1. Host already set it properly.
  • [0374] Encryption group key is stored in BSSEntry (section 7.7.1). When Address 1 is a group address, the device shall perform encryption using group key from the i-th BssEntry in BSSTable.
  • [0375] Device doesn't have to set FrameControl.Protected bit to 1. Host already set it properly.

[0376] 6.2.3.1 WEP Encryption

[0377] Host provides and initializes the WEP header. Device should retrieve the IV (Initialization Vector) value from the header.

[0378] Host provides uninitialized space for the 4 byte WEP ICV (Integrity Check Value). Device is required to update it with the result of WEP encryption.

[0379] 6.2.3.2 TKIP Encryption

[0380] Host provides and initializes the TKIP header. Device should retrieve the IV (Initialization Vector) value from the header.

[0381] Host provides uninitialized space for the 4 byte TKIP ICV (Integrity Check Value). Device is required to update it with the result of TKIP encryption.

[0382] 6.2.3.3 CCMP Encryption

[0383] Host provides and initializes the CCMP header. Device should retrieve the PN (Packet Number) value from the header.

[0384] Host provides uninitialized space for the 8 byte CCMP MIC (Message Integrity Code). Device is required to update it with the result of CCMP encryption.

[0385] 6.2.4 Retransmission Management

[0386] Device shall perform retransmission for unicast packet if it doesn't receive the corresponding MAC layer Acknowledgment. For packets that require MAC layer acknowledgement, the host will clear the No ACK bit in TxFlags field in TxDescriptor.

[0387] 802.11 ACK frame is the MAC layer acknowledgement for most frames. There are other types of MAC layer acknowledgement for certain other types of 802.11 frames. For example, 802.11 BlockAck frame is a valid acknowledgement to an 802.11 BlockAckReq frame; and a normal 802.11 data frame is a valid acknowledgement to an 802.11 PsPoll frame. The device will need to look into the FrameControl field in outgoing packet in order to determine the type of incoming 802.11 MAC layer acknowledgement which it should expect to receive.

[0388] TxRates array in TxDescriptor controls the data rate and the maximum number of retransmissions. TxRates contains 8 transmission data rates, one for each transmission attempt. TxRates[0] is the data rate for the first transmission and TxRates[1˜7] are data rates for retransmissions. TxRates array is null terminated (data rate 0) when less than 8 (re)transmissions are needed. The device shall fail a transmission when it reaches the retransmission limit.

[0389] CW field in TxDescriptor specifies the contention window parameter that the device shall use in retransmission back-off.

[0390] 6.2.5 Fragmentation

[0391] Fragmentation is done in host and is transparent to the device. Each fragment is described by one

[0392] TxDescriptor. Except for the last fragment, the host will set Hold Medium Bit in TxFlags field in the TxDescriptor (section 7.4). Host will assign the same Sequence Number to all fragments belonging to the same MSDU.

[0393] Device shall set Duration field in the MAC header according to the special rules described in section 9.2.5.6 in yjr IEEE 802.11 Specification. If device wants to know whether fragments are belonging to the same MSDU, it shall inspect MoreFrag bit in FrameControl. Hold Medium Bit in TxDescriptor is not reliable since it can be used in other situations wherever SIFS interval timing is needed.

[0394] 6.2.6 Burst Transmission (Block ACK and No AC TX)

[0395] Burst Transmission is optional. Capability of burst transmission is reported in Max TxBurstSize field in RadioCapabilityEntry (see section 7.2.2). Burst Transmission is used for implementing 802.11 Block ACK and 802.11 No ACK which are described in section 9.10 and 9.11 in the IEEE 802.11 specification. 802.11 Block ACK setup and teardown is transparent to the device.

[0396] Each packet in burst transmission is described by one TxDescriptor. In addition, the host will do the following:

• • [0397] 1. For 802.11 BlockACK transmission, host will set either RTS Protection Bit or CTS Protection Bit in TxFlags on the first frame
  • [0398] 2. Except for, the last frame in the burst exchange,
    • [0399] a. Set NoACK bit in TxFlags
    • [0400] b. Set Hold Medium Bit in TxFlags
    • [0401] c. TxRates array will contain only one rate
  • [0402] 3. For 802.11 BlockACK transmission, the last frame will be an 802.11 BlockAckReq control frame.
    • [0403] a. No ACK bit in TxFlags is clear. NoACK==0 means that device shall retransmit if it doesn't receive an MAC level acknowledgement.
    • [0404] For 802.11 BlockAckReq, both 802.11 BlockAck and 802.11 ACK are considered as acceptable MAC level acknowledgement.
    • [0405] b. Hold Medium Bit in TxFlags is clear.
      • [0406] This will let device to release the medium after it completes the transmission.
    • [0407] c. TxRates array may contain more than one rate.
      • [0408] The device shall retransmit the last frame if it can not receive
  • [0409] 4. For 802.11 NoACK transmission, the last frame will be a normal 802.11 data or management frame.
    • [0410] a. No ACK bit in TxFlags will be set.
    • [0411] b. Hold Medium Bit in TxFlags may or may not be set.
    • [0412] c. TxRates array contain only one rate
  • [0413] 5. The host ensures that all packets in the same burst exchange are directed to the same receiver.
  • [0414] 6. For 802.11 BlockACK TX, the host ensures that all the data frames are QoS frames.
    • [0415] The host will perform retransmissions for packets that are not acknowledged by 802.11 BlockACK frame.
  • [0416] 7. The host ensures the burst mode exchange can be accomplished within the TXOP limit.
    • [0417] Note: the TXOP limit may cross TBTT boundary. For EDCA, this is allowed by IEEE 802.11 Specification.

[0418] There must be one TxStatus for every frame transmitted in burst mode. The device may combine all TxStatus in one status response.

[0419] 6.2.7 Protection (RTS or CTS-to-self)

[0420] When protection is needed, host will set RTS Protection bit or CTS Protection bit in TxFlags.

[0421] Subject to requirements defined in 9.13 in the IEEE 802.11 Specification, device shall transmit RTS and CTS frame using the highest Basic R ate that is less than or equal to TxRates[0] in the TxDescriptor. Here, the Basic Rate Set is the intersection of BSS Basic Rate Set and DSSS/HRDSSS Madatory Rate Set. When intersection is empty, the BSS Basic Rate Set shall be used. Device can find BSS Basic Rate Set from the corresponding BSSEntry in BSSTable (see section 7.7.1 for BSSEntry structure).

[0422] Device may retry RTS protection. For each retransmission, device shall find the highest Basic Rate that is less than or equal to TxRate[i] in the TxDescirptor, where i is the i-th retransmission.

[0423] After RTS completes, device shall transmit the subsequent data frame starting from data rate TxRates[0] (regardless of whether retransmission occurs in RTS state or not).

[0424] In case of burst transmission and fragmentation transmission, the TxRate in first TxDescriptor shall be used.

[0425] The device shall set the Duration field to cover the duration until the first packet with either No ACK bit==0 or

[0426] Hold Medium bit==0. If the first packet has No ACK bit==0, the duration must also include the time that is required for transmitting the MAC layer acknowledgement. FIGS. 10-13 illustrate some of possible scenarios.

[0427] 6.2.8 Transmission of Beacon and Probe Response

[0428] Host transmits 802.11 probe response and beacon frames just like any other 802.11 frames.

[0429] Device shall fill the Timestamp field value with the current TSF timer value plus a host supplied adjustment value. The adjustment value is passed to the device in TxDescriptor (section 7.4).

[0430] Note:

• • [0431] 1. Host needs to supply the adjusted value since it may send probe response and beacon frames for the BSSs which device is not aware of. Therefore, device may not have LastLocalTime and LastBssTime, which are required for calculating the current BSS time.
  • [0432] 2. To determine the frame type, device shall inspect the Type and Subtype field in Frame Control in the MAC header.
  • [0433] 3. Host may-send unsolicited probe response (transmit probe response without receiving a probe request).

[0434] 6.3 Automatic Beacon Transmission

[0435] 6.3.1 Automatic Beacon Transmission in IBSS

[0436] When host is operating in IBSS mode, host will program device to automatically transmit beacon at a specified interval. The request is sent to the device via StartIBSSBeacon request (section (7.6.1). When generating beacon packets, device shall follow the procedure defined in section 11.1.2.2 in the IEEE 802.11 specification.

[0437] 6.3.2 Automatic Beacon Transmission in Infrastructure Network

[0438] When host is operating as an AP (access point) in infrastructure network, it will transmit beacon packet at a specified interval. The beacon packet is transmitted like a regular 802.11 management packet. Device is required to set the Timestamp field in the beacon packet (section 6.2.8).

[0439] Note: since the host will need to update TIM information element frequently, the benefit of offloading the beacon generation to device is dramatically reduced. Given that the typical sizes of beacon packets are around 50˜300 bytes, there isn't big difference between transferring a full beacon and transferring a TIM information element for a serial link like USB bus.

7 Data Types

[0440] 7.1 Basic Data Types

[0441] 7.1.1 KeyMaterial

[0442] KeyMaterial is the data structure representing cipher key.

[0443]

TABLE 1
Description of KeyMaterial data type
Field	Type	Description
Algorithm	uint8	Indicate the cipher algorithm
		0—WEP
		1—TKIP
		2—AES
		128~255—IHV Specific value (can be used by
		IHV driver)
		Other values—Reserved
Length	uint8	Length of key.
		For WEP algorithm, Length is either 5 or 13.
		For TKIP, Length field always has a value of 8.
		For AES, Length field always has a value of 16.
		Other values are reserved.
Key	uint8[64]	The key material.

[0444] 7.1.2 DataRateIndex

[0445] Data rate index is represented as an 8 bit unsigned integer (uint8). It is an enumeration type, defined in Table 2 and Table 3. All the other data rate index values are reserved.

• • [0446] If device supports 802.11b, it must support all the data rates in Table 2.
  • [0447] If device supports 802.11g, it must support all the data rates in Table 2 and Table 3. ERP-PBCC and DSSS-OFDM modes are not implemented in this specification.
  • [0448] If device supports 802.11a, it must support all the data rates in Table 3.

[0449]

TABLE 2
Data Rate Index for CCK Data Rates
	DataRateIndex	Data Rate Value
	0	1 Mbps (CCK)
	1	2 Mbps (CCK)
	2	5.5 Mbps (CCK)
	3	11 Mbps (CCK)

[0450]

TABLE 3
Data Rate Index for OFDM Data Rates for both 802.11a and 802.11g
DataRateIndex	Data Rate Value
6	6 Mbps
	3 Mbps for 10 MHz channel spacing (for 11a only)
	1.5 Mbps for 5 MHz channel spacing (for 11a only)
7	9 Mbps
	4.5 Mbps for 10 MHz channel spacing (for 11a only)
	2.25 Mbps for 5 MHz channel spacing (for 11a only)
8	12 Mbps
	6 Mbps for 10 MHz channel spacing (for 11a only)
	3 Mbps for 5 MHz channel spacing (for 11a only)
9	18 Mbps
	9 Mbps for 10 MHz channel spacing (for 11a only)
	4.5 Mbps for 5 MHz channel spacing (for 11a only)
10	24 Mbps
	12 Mbps for 10 MHz channel spacing (for 11a only)
	6 Mbps for 5 MHz channel spacing (for 11a only)
11	36 Mbps
	18 Mbps for 10 MHz channel spacing (for 11a only)
	9 Mbps for 5 MHz channel spacing (for 11a only)
12	48 Mbps
	24 Mbps for 10 MHz channel spacing (for 11a only)
	12 Mbps for 5 MHz channel spacing (for 11a only)
13	54 Mbps
	27 Mbps for 10 MHz channel spacing (for 11a only)
	13.5 Mbps for 5 MHz channel spacing (for 11a only)

[0451] 7.1.3 DataRateSet

[0452] DataRateSet is a 128-bit bitmask as defined below. When bit i is set, data rate index i is in the rate set. For example, an 802.11b device will set bit 0˜3 and clear all the other bits in its supported data rate set.

[0453]

	Field	Type	Description
	Low	uint64	Bit 0~63
	High	uint64	Bit 64~127
			Reserved. Must be always zero.

[0454] 7.1.4 BandChannel

[0455] BandChannel is 32 bit in width as defined following:

[0456]

[0457] Band (bit 16˜31)

• • [0458] For 2.4 Ghz band operation, this field is always zero.
  • [0459] For 5GHz band operation, this field specifies the channel starting frequency in 0.5 MHz unit.
  • [0460] The following values are currently defined in Annex J in the IEEE 802.11-2007.
    • [0461] 10000: Channel Start Frequency 5 GHz
    • [0462] 9875: Channel Start Frequency 4.9375 GHz
    • [0463] 9780: Channel Start Frequency 4.89 GHz
    • [0464] 9700: Channel Start Frequency 4.85 GHz
    • [0465] 8000: Channel Start Frequency 4 GHz
    • [0466] 10005: Channel Start Frequency 5.0025 GHz
    • [0467] 8005: Channel Start Frequency 4.0025 GHz
  • [0468] All other values are reserved.

[0469] Channel Spacing (bit 12˜15)

• • [0470] 0: 20 MHz Channel Spacing
  • [0471] 1: 10 MHz Channel Spacing (for 5 GHz band only)
  • [0472] 2: 5 MHz Channel Spacing (for 5 GHz band only)
  • [0473] 3˜15: Reserved

[0474] Channel (bit 0˜11)

• • [0475] When Band field is 0, Channel field can have value ranging from 1˜14. All other values are reserved. For channel 14, the channel center frequency shall be 2484 MHz. For channel 1˜13, the channel center frequency is calculated as the following:
    ChannelCenterFrequency=2407+Channel×5 MHz

[0476] When Band field is not zero, Channel field can have value ranging from 1˜255. All other values are reserved. The channel center frequency is calculated as the following:
ChannelCenterFrequency=Band×0.5 MHz+Channel×5 MHz

[0477] 7.2 Capability

[0478] 7.2.1 Global Capability

[0479]

Field	Type	Description
NumRadios	Uint8	Reserved.
		Must always be 1.
BssTableSize	uint8	The size of BssTable. This value
		must be at least 1.
PeerTableSize	uint16	The size of PeerTable. This value
		must be at least 32.
SupportedCiphers	uint32	This is bit mask indicating
		supported packet encryption/
		decryption algorithms
		Bit 0—WEP Algorithm
		Setting this bit indicates that the
		device supports WEP encryption
		and decryption
		Bit 1—TKIP Algorithm
		Setting this bit indicates that the
		device supports TKIP encryption
		and decryption
		Bit 2—AES CCMP Algorithm
		Setting this bit indicates that the
		device supports AES CCMP
		encryption and decryption.
		Other bits—Reserved
		Always zero
PermanentAddress	MacAddress	The permanent MAC address that
		is flashed in the device.
IBSSBeaconMaxSize	uint16	Maximum size of IBSS Beacon
		Packet.
		Device shall reserve at least 512
		bytes for storing IBSS beacon
		packets.
		See section 7.6 for usage of this
		field.
TxCapabilities	uint16	Bit 0—Transmission Rate
		Adaptation
		Setting this bit
		indicates that device
		implements transmission rate
		adaptation and will ignore the
		data rates in TxDescriptor
		(section 7.4).
		Clearing this bit means that
		device relies on host system
		for providing the transmission
		data rate in TxDescriptor
		(section 7.4).
		If this bit is set, Bit 1 must also
		be set.
		Bit 1—Retransmission Rate
		Adaptation
		Setting this bit
		indicates that device
		implements retransmission rate
		adaptation.
		Clearing this bit means that
		device relies on host system for
		providing the retransmission
		data rates in
		TxDescriptor (section 7.4).
		Bit 2—per-packet ACK
		capabilities
		Setting this bit indicates that
		device implements ACK status
		information in TxStatus upon
		transmission completion.
		Clearing this bit otherwise.
		If device implements ACK
		status information, it must be
		able to report the signal strength
		and received data rate of the
		802.11 ACK frame. It can
		optionally report the noise floor
		of the 802.11 ACK frame.
		See section 7.5 for details.
		Bit 3~15—Reserved
		These bits must be always zero.
QoSCapabilities	uint16	Bit 0—QoS Supported
		Setting this bit indicates that
		device implements all the
		hardware features that are
		required for supporting basic
		QoS functionalities.
		Below outlines the
		hardware requirements:
		1. Ability of transmitting unicast
		packets without requiring the
		receiver to send 802.11 ACK
		This is needed for implementing
		BlockACK and NoACK
		transmission policy.
		2. Ability of recognizing the ACK
		policy bit in QoS header and
		doesn't reply 802.11 ACK when
		requested by the sender.
		3. In addition to TX0 transmission
		queue, device should implement
		4 transmission queues
		TX1˜4.
		4. if device implements duplicate
		packet detection, it must be able
		to detect duplicate packets on a
		per-TID per transmitter basis.
		Bit 1~15—Reserved
		These bits must always be zero.
DefaultRegDomain	uint16	The default regulatory domain. It
		is 2 byte long and is encoded in
		the same way as IEEE 802.11
		standard MIB variable
		dot11RegDomainsSupportedValue.
NumOfSup-	uint16	Number of regulatory domains
portedRegDomains		which the device can support.

[0480] 7.2.2 RadioCapabilityEntry

[0481] There is one RadioCapabilityEntry for each independent radio.

[0482]

Field	Type	Description
PhyTypeMask	uint32	Bit 0—802.11b
		Setting this bit indicates that this radio
		supports 802.11 b.
		Bit 1—802.11g
		Setting this bit indicates that this radio
		supports 802.11 g.
		Bit 2—802.11a
		Setting this bit indicates that this radio
		supports 802.11 a.
		Bit 3~31—reserved.
MaxTxBurstSize	uint16	The maximum total size of packets in a
		burst transmission supported by the
		device.
		If device doesn't support burst
		transmission, it should set this field to
		zero.
		See section 6.2.2 for transmission queue
		management and section 6.2.6 for burst
		transmission.
TxPowerLevel	uint16[8]	8 levels of TX power (in mW).
		Device should report TX power levels in
		descending order. It should always put 0 at
		the end of this array when it has less than
		8 transmission power levels.
NumOfSup-	Uint16	Number of supported band/channels
portedBandChan-
nels
Reserved	uint16[4]	Must always be zero

[0483] 7.2.3 SupportedRegDomains

[0484] This table describes the regulatory domains supported by the radio. Each entry in the table is 2 byte long and is encoded in the same way as IEEE 802.11 standard MIB variable dot11RegDomainsSupportedValue.

[0485] 7.2.4 SupportedBandChannels

[0486] This table describes the band, channel and channel spacing supported by the radio. Each entry in the table is type of BandChannel defined in section 7.1.4.

[0487] The actual channels that will be used are determined by the current regulatory domain. For example, a device may support channel 1˜14 for 2.4 GHz operation. It supports FCC (0×10) and Japan (0×40) regulatory domains. When the current regulator domain is set to FCC, host will perform active scanning in only channel 1˜11.

[0488] If device supports

[0489] 7.3 RxDescriptor

[0490] RxDescriptor is a fixed size 32-byte structure passed from device to host. See section 6.1 for receiving operations and section 8.4.2 for NWF_USB_MSG_RX_PACKET.

[0491]

Field	Type	Description
RxFlags	Uint32	Rx flags field.
		Bit 0—RxBuffer overflow bit.
		Setting this bit indicates that at least
		one packet is dropped due into
		insufficient receive buffer before
		this packet is fully received.
		Bit 1—FCS Error Bit
		Setting this bit indicates the packet
		is corrupted (fail to pass FCS check)
		Bit 2—Address 1 Matched Bit
		Setting this bit indicates the packet
		has passed Address 1 test as defined
		in section 0 and reach
		ProcessRxAfterMatchingAddr1
		(Error! Reference
		source not found. 7).
		Bit 3—Key Unavailable Bit
		Setting this bit indicates that the
		decryption key is not available.
		This bit must be always 0 for
		unencrypted packets.
		Setting this bit implies bit 2 must
		also be set.
		Bit 4—Decryption Failure Bit
		Setting this bit indicates decryption
		failure.
		When this bit is set, bit 2 must be 1
		and bit 3 must be 0.
		Bit 5—Probe Replied Bit
		Setting this bit indicates that device
		has already replied the probe request
		with an 802.11 probe response.
		This bit shall be always 0 when the
		received packet is not an 802.11
		probe request.
		See section 6.1.7 for further
		information.
		Bit 6~31—reserved.
RxRate	int8	The data rate index value for the data
		rate at which the packet is received.
		See Table 2 and Table 3 for the
		mapping data rate index and data
		rate value.
RSSI	int8	Receive signal strength indicator. The
		valid range is (−128 dBm to 127 dBm).
NoiseFloor	int8	Noise floor in dBm. The valid range is
		[−128, −1] dBm.
		If device can't measure noise floor, it
		should set this field to 0.
		This HCl specification allows the device
		to indicate noise floor on a per-packet
		basis. However, the frequency of noise
		floor measurement is specific to
		device implementation. Therefore,
		device may report same NoiseFloor
		value for several consecutive
		received packets.
Reserved	int8[13]	Reserved. Must always be 0.
BandChannel	BandChannel	Identify the channel on which this
		packet is received.
TSF	Uint64	The local TSF timer value when the
		packet is received.
Notes:
1. For USB device, immediately (without padding bytes) after the Rx descriptor is the packet data.
2. For encrypted packets
If device successfully decrypts an encrypted packets, it must set RxFlags.Bit2 == 1 and RxFlags.Bit3 == 0 and RxFlags.Bit4 == 0. It must not reset FrameControl.Protected bit after decryption. The host relies on Protected bit for removing cipher header and cipher trailer.
If device doesn't have decryption key for an encrypted packets, it must set RxFlags.Bit3 == 1 and RxFlags.Bit4 == 0 to signal the host for performing the decryption.

[0492] 7.4 TxDescriptor

[0493] TxDescriptor is a 32-byte fixed size structure passed from host to device. See section 6.1.7 for transmission operations and section 0 for NWF_USB_MSG_TX_PACKET.

[0494]

Field	Type	Description
TxFlags	Uint32	Tx flags field.
		Bit 0—Hold Medium Bit
		When this bit is set, indicates that the device
		must immediately transmit the next packet
		without releasing the medium after it
		completes the transmission of this packet.
		Here, the current packet and the next packet
		are submitted to the device in one single
		request.
		Bit 1—No ACK Bit
		When this bit is set, the transmission doesn't
		need ACK from the receiver(s). The host
		will set this bit when the receiver address is a
		group address or Block ACK is being used.
		Bit 2—Encryption bit.
		Setting this bit indicates that the device must
		encrypt the packet using key from the
		BSSTable/PeerTable specified by
		BSSPeerIndex field.
		Otherwise, the host must not attempt to
		encrypt the packet.
		See section 6.2.3 for details about
		encryption.
		Bit 3—Preamble Bit
		When this bit is set, long preamble should
		be used.
		Otherwise, short preamble is used.
		Bit 4—RTS Protection Bit
		When this bit is set, RTS/CTS handshake
		shall be performed prior to the transmission
		of the packet.
		The host will never set this bit if the receiver
		address is a group address.
		Bit 5—CTS Protection Bit
		When this bit is set, CTS-to-self protection
		shall be used prior to the transmission of the
		packet.
		Bit 6—Out-of-BSS Bit
		When this bit is set, this packet is an
		out-of-BSS packet. BSSPeerIndex field will
		not contain a valid value.
		Bit 7~31—reserved.
TxRates	uint8[8]	The data rate index value for each (re)-
		transmission.
		TxRates[i] is the data rate index for the i-th
		transmission.
		TxRates array is terminated with 0xff when
		less than 8 data rates are provided.
		If No ACK bit in TxFlags is clear, the
		(re)transmission shall be stopped when
		the device receives an 802.11 ACK or i > 8
		or TxRates[i] == 0. For both i > 8 and
		TxRates[i] == 0, the transmission fails.
		If No ACK bit in TxFlags is set, the device
		should transmit the packet using TxRates[0]
		(the first data rate).
		For data rate index and data rate value
		mapping, see Table 2 and Table 3.
Reserved	uint8[8]	8-bytes reserved. Must always be 0.
AIFSN/	uint8	Bit 0~3:
PwrLevel		0~15 AIFSN value.
		Bit 4~6—Transmission Power Level Bit
		Value 0~7 corresponding to the transmission
		power level reported in 7.2.2.
		Bit 7—Reserved
CW	uint8	ECWmin and ECWmax that should be used for
		this packet.
		Bit 0~3—ECWmin
		CWmin = 2{circumflex over ( )}ECWmin − 1
		Bit 4~7—ECWmax
		CWmax = 2{circumflex over ( )}ECWmax − 1
BSSPeerIndex	uint16	This field is invalid when “Out-of-BSS” bit is
		set in TxFlags.
		Otherwise, it contains the BSSTable and
		PeerTable index.
		Bit 0~3—the index in BSSTable. See section
		7.7 for the details about BSSTable.
		Bit 4~15—the index in PeerTable. See section
		7.8 for the details about PeerTable.
Reserved	uint64	Always zero.

[0495] 7.5 TxStatus

[0496] TxStatus is a 32-byte fixed size structure passed from device to host. See section 6.1.7 for transmission operations and section 8.4.1 for NWF_USB_USG_TX_STATUS.

[0497]

Field	Type	Description
TxFlags	uint32	Tx Status Flags
		Bit 0—Fail Bit
		Setting this bit indicates that the
		transmission fails.
		Otherwise, the transmission succeeds.
		Note: when “No Ack” bit in the
		corresponding TxDescriptor is clear,
		transmission shall always succeed.
		Bit 1~31—reserved.
Retries	uint8	Bit 0~2—Retry Count Bit
		N/A if No ACK bit in the corresponding
		TxDescriptor is clear.
		Otherwise, this field indicates the
		number of retransmissions.
		Bit 3~5: RTS Retry Count Bit
		N/A if No ACK bit in the corresponding
		TxDescriptor is clear.
		Otherwise, this field indicates the
		number of RTS retransmissions.
TxRate	uint8	This field is applicable only when device
		implements transmission or retransmission
		rate adaptation. This field contains the
		data rate of the last (re)transmission
		which device performs on the packet.
ACKRxRate	int8	The data rate index value for the data
		rate at which the 802.11 ACK is
		received. See Table 2 and Table 3
		for the mapping data
		rate index and data rate value.
		This status information is optional. It is
		applicable only when the packets
		require 802.11 ACK and the device
		implements per-packet ACK status
		indication. Device should set this field
		to zero if this field is not applicable.
		For details on how device reports the
		capability of per-packet ACK status
		indication, see the definition of Bit 2
		in TxCapabilities field in section 7.2.1.
ACKRSSI	int8	Receive signal strength indicator of the
		802.11 ACK. The valid range is
		(−128 dBm to 127 dBm).
		This status information is optional. It is
		applicable only when the packets
		require 802.11 ACK and the device
		implements per-packet ACK status
		indication. Device should set this field
		to zero if this field is not applicable.
		For details on how device reports the
		capability of per-packet ACK status
		indication, see the definition of Bit 2 in
		TxCapabilities field in section 7.2.1.
ACKNoiseFloor	int8	Noise floor of the 802.11 ACK in dBm.
		The valid range is [−128, −1] dBm.
		If device can't measure noise floor, it
		should set this field to 0.
		If device doesn't support per-packet
		noise floor measurement, it should set
		this field to the noise floor value
		from its most recent measurement.
		This status information is optional. It is
		applicable only when the packets require
		802.11 ACK and the device implements
		per-packet ACK status indication.
		For details on how device reports the
		capability of per-packet ACK status
		indication, see the definition of Bit 2 in
		TxCapabilities field in section 7.2.1.
Reserved	uint8[23]	Reserved padding bytes.

[0498] 7.6 Automatic IBSS Beacon Transmission

[0499] 7.6.1 StartIBSSBeacon

[0500] This primitive starts the IBSS beacon generation in the current channel. The size of beacon packet doesn't exceed the IBSSBeaconMaxSize in GlobalCapability defined in section 7.2.1.

[0501] For USB device, the size of the beacon packet can be determined by subtracting the size of the fixed portion of following data structure from the USB message size.

[0502]

Field	Type	Description
Reserved	uint8	This field is always zero.
BssIndex	uint8	This is the index of the BssEntry (see section
		7.7.1).
		From the BssEntry, device can find detailed
		information about the BSS, such as BSSID
		and basic data rate.
BeaconInterval	Uint16	Beacon Internval in TUs
TxRate	uint8	The data rate at which the packet should be
		transmitted.
PwrLevel	uint8	The transmission power level of the beacon
		packet
BeaconPacket	Variable	The beacon packet including the MAC
	size	header and beacon body.
		Device should update the Timestamp field
		with the current TSF whenever it transmits
		a beacon packet.

[0503] 7.6.2 StopIBSSBeacon

[0504] This primitive stops the IBSS beacon generation. It is host's responsibility to issue StopIBSSBeacon before switching to a different channel.

[0505]

	Field	Type	Description
	Reserved	uint8	This field is always zero.

[0506] 7.7 BSS table

[0507] There is a global BSS table describing each BSS in which the device joins. BSS table is a fixed size array. Its size can't be changed once the host driver is loaded. The following pseudo code describe BSS table.

• • [0508] BssEntry BssTable[BssTableSize];

[0509] Host can modify BssEntry. It never reads BssEntry from the device. When BssEntry.BSSID is null (00:00:00:00:00:00), the corresponding BssEntry is empty. When device needs to look up BSS table, it must skip the empty entry.

[0510] At RX path, device will need to look up BSS table for the purpose of packet filtering and/or determining the basic rate (to transmit 802.11 ACK).

[0511] At TX path, BssEntry index is already part of request. Device doesn't have to look up the BSS table. it should use the BssEntry indicated by the index.

[0512] The device must support a BSS table with at least one BssEntry (BssTableSize==1). BssTableSize>1 is needed to support repeater AP and/or virtual WiFi functionalities.

[0513] If the device supports more than one BssEntry, it must also support per-BSS basic rate and synchronization with multiple IBSS networks.

[0514] When device supports only one BssEntry, host will not start or join more than one IBSS network.

[0515] However, it may start or associate with multiple infrastructure networks. In this case, the Basic

[0516] Rates field will contain the basic data rates common to all the BSS'es. The BSSID field in the BssEntry will be set to broadcast address (wildcard address). This will disable the TSF synchronization and BSSID data packet filtering in the device.

[0517] 7.7.1 BssEntry

[0518]

Field	Type	Description
BSSID	MAC	BSSID.
	Address	When BSSID fieid is not a broadcast address
		(either unicast or multicast), it will be used
		as an filter for filtering 802.11 data packets
		(see section 6.1.1).
		When BSSID is a unicast address, device can
		(not required) update its TSF timer upon
		receiving a probe response or beacon
		frames from the BSS.
GroupKey	KeyMaterial	Cipher key for encrypting broadcast/
		multicast packets transmitted to
		the BSS identified by BSSID field.
		This field is N/A when BSSID field
		is a group address.
BasicRates	DataRateSet	When BSSID field is a unicast address, this
		field contains the basic data rates which
		are supported by all devices in the BSS.
		When BSSID field is a broadcast group
		address, this field contains the default
		basic data rates - the basic
		rates to be used when a matching
		BssEntry can not be found.
		When BSSID field is a non-broadcast group
		address, this field is N/A.
LocalTsf	uint64	Local Tsf time from the RxDescriptor for the
		last received probe response or beacon
		frame.
		This field is N/A when BSSID field is
		a group address.
BssTime	uint64	The timestamp value in the last received
		probe response or beacon frame
		This field is N/A when BSSID field is a
		group address.
Notes:
1. BSSID field uniquely identified a BssEntry. When BSSID is null (00:00:00:00:00:00), it means BssEntry is empty.
2. All the BssEntry fields, including GroupKey, are read-able.
3. All the BssEntry fields are write-able. Host always set the whole BssEntry.

• • [0519] a. When BSSID is changed from a non-null value into null, it is a BssEntry deleting operation. It is up to device implementation to implement deleting specific operation.
  • [0520] b. When BSSID is changed from into a non-null value, it is a BssEntry creating operation. It is up to device implementation to implement creating specific operation.
  • [0521] c. When BSSID is not null and is not changed by a BssEntry setting request, it is a BssEntry updating operation.
  • [0522]  4. For an BssEntry updating operation,
  • [0523] a. If it is important for the device to know which field is updated, the device can find it out by comparing the updating request with the values stored in the device.
  • [0524] b. The device can assume that the BasicRates field will not be updated (the value in the request is same as the one stored in the device).
  • [0525] c. GroupKey can be changed even when the device has broadcast/multicast packets in its TX queue that require access to the GroupKey. The device should ensure atomicity at packet level: each packet in the TX queue must be encrypted either by the old key or by the new key. It is ok that some are encrypted with the old key and some are encrypted with the new key.
  • [0526] d. After GroupKey is updated, all the subsequent broadcast/multicast packets submitted from the host must be encrypted with the new key.

[0527] 7.8 Peer Table

[0528] There is a global peer table describing each peer which the device associates with. Here, the peer can be an 802.11 ad hoc peer station or an infrastructure AR Peer table is a fixed size array. Its size can't be changed once the host driver is loaded. The following pseudo code describe BSS table.

• • [0529] PeerEntry PeerTable[PeerTableSize];

[0530] Host can modify PeerEntry. It never reads PeerEntry from the device. When PeerEntry.PeerMac is null (00:00:00:00:00:00), the corresponding PeerEntry is empty. When device needs to look up peer table, it must skip the empty entry.

[0531] At RX path, device will need to look up peer table for the purpose of packet decryption, etc.

[0532] At TX path, PeerEntry index is already part of request. Device doesn't have to look up the peer table. It should use the PeerEntry indicated by the index.

[0533] 7.8.1 PeerEntry

[0534]

TABLE 4
Description of PeerEntry data type
Field	Type	Description
PeerMac	MAC	Peer's MAC address. When it is null, the
	Address	PeerEntry is empty. Otherwise, it contains
		the MAC address of the peer and must
		be a unicast address.
BSSID	MAC	Peer's BSSID. This field must contain a
	Address	unicast address for a non-empty PeerEntry.
DataRate	DataRateSet	Data rates which are supported by this peer.
		This field is provided so that the device can
		choose proper data rates for rate adaptation.
PairwiseKey	KeyMaterial	Cipher key for encrypting or decrypting
		unicast packets.
GroupKey	KeyMaterial	Cipher key for decrypting broadcast/
		multicast packets transmitted from peer in
		network identified by BSSID field.
Notes:
3. PeerMac and BSSID uniquely identify a PeerEntry
4. All the PeerEntry fields, including PairwiseKey and GroupKey, are read-able.
5. All the BssEntry fields are write-able. Host always set the whole BssEntry.
a. When PeerMac is changed from a non-null value into null, it is a PeerEntry deleting operation. It is up to device implementation to implement deleting specific operation.
b. When PeerMac is changed from into a non-null value, it is a PeerEntry creating operation. It is up to device implementation to implement creating specific operation.
c. When PeerMac is not null and is not changed by a PeerEntry setting request, it is a PeerEntry updating operation.
6. For an BssEntry updating operation,
a. If it is important for the device to know which field is updated, the device can find it out by comparing the updating request with the values stored in the device.
b. PairwiseKey can be changed even when the device has directed packets in its TX queue that require encryption. The device should ensure atomicity at packet level: each packet in the TX queue must be encrypted either by the old key or by the new key. It is ok that some are encrypted with the old key and some are encrypted with the new key.
c. After PairwiseKey is updated, all the subsequent directed packets submitted from the host must be encrypted with the new key.
d. After GroupKey is updated, all the subsequent broadcasted/multicasted packets received from the peer must be decrypted with the new key. Packets already in the Rx buffer at the time when GroupKey is updated must be decrypted with the old key.

[0535] 7.9 Other Primitives

[0536] 7.9.1 GlobalState (W)

[0537] GlobalState contains relatively stable information. Items that may change frequently, such as RadioPowerState and CurrentChannel, have their own dedicated primitives.

[0538]

Field	Type	Description
PacketFilter	uint32	Bit 0—FilterDiscardCorruptedFrame
		If this bit is set, device should discard
		all frames that fail to pass FCS
		verification and should not
		indicate them to host.
		Otherwise, device should indicate
		corrupted frames to host (if device
		is capable of receiving them).
		Bit 1—FilterDiscardDuplicateFrame
		If this bit is set and device implements
		duplicate frame detection, device
		should discard duplicate frames.
		Otherwise, device should not drop
		duplicate frames (but it can still
		drop that frame at later
		time if there are other applicable
		filters).
		Bit 2—FilterDiscardAddress1Mis-
		matchedFrame
		If this bit is set, device should discard
		directed frame in which the Address
		1 field doesn't match device's
		current MAC address.
		Otherwise, device should indicate
		the frames to host.
		Bit 3—FilterDiscardControlFrame
		If this bit is set, device should discard
		802.11 control frames except PS-Poll,
		BlockACKReq and BlockACK frames.
		Otherwise, device should indicate the
		frames to host.
		Bit 4—FilterDiscardBSSIDMis-
		matchedFrame
		This bit is applicable to 802.11 data
		frames only. If this bit is set,
		device should discard 802.11
		data frames with a BSSID that can
		not be found in the BSSTable.
		Otherwise, device should indicate
		the frames to host.
		Bit 5~31—Reserved
		Must always be zero.
CurrentRegDomain	Uint16	The current regulatory domain. The
		default value must be DefaultRegDomain
		in GlobalCapability as defined
		in section 7.2.1.

[0539] 7.9.2 RadioPowerState (W)

[0540]

Field	Type	Description
RadioPowerState	Uint8	Bit 0~1—Radio Power State Bit
		0—radio is turned off
		1—radio is in doze state (power off for
		power saving purpose)
		2—reserved
		3—radio is turned on
		Bit 2~7—Reserved
		Must be always 0.
		Switching between “doze” and “on” state
		shouldn't take more than 1 millisecond.
Reserved	Uint8[3]	Reserved. Must be always 0.

[0541] 7.9.3 CurrentChannel (W)

[0542]

Field	Type	Description
BandChannel	BandChannel	See section 7.1.4 for BandChannel data
		type.
		After device powers up, it may stay
		in any band or channel.
TxPowerIndex	Uint8	The default transmission power level for
		the new channel.
		This value is actually an index into
		TxPowerLevel table which the device
		reports in GlobalCapability as
		defined in section 7.2.1.
TxQueueFlags	uint8	Bit 0—In-BSS queue enabled
		Setting this bit will enable (or
		resume) the packet transmission from
		the in-BSS queue in the new channel.
		Clearing this bit will disable (or
		suspend) the packet transmission
		from the in-BSS queue in the new
		channel.
		Bit 1~7—Reserved
		Must always be zero.

[0543] 7.9.4 FlushTxQueue (W)

[0544]

Field	Type	Description
TxQueue	uint8	Bit 0—Q1
		When this bit is set, all packets queued in Q1 are
		immediately discarded.
		Bit 1—Q2
		When this bit is set, all packets queued in Q2 are
		immediately discarded.
		Bit 2—Q3
		When this bit is set, all packets queued in Q3 are
		immediately discarded.
		Bit 3—Q4
		When this bit is set, all packets queued in Q4 are
		immediately discarded.
		Bit 4~7—Reserved
		These bits must always be zero.
		After device powers up, Q1~Q4 must be empty.
Reserved	uint8[3]	Reserved. Must be always 0.

8 USB Message Definition

[0545] A USB wireless LAN device is a high speed USB device (low speed and full speed configurations may not be supported). It is implemented as a USB CDC (Communication Device Class) device with two interfaces. A Communication Class interface of type Abstract Control, and a Data Class interface combine to form a single functional unit representing the USB wireless LAN device. The Communication Class interface includes a single endpoint for event notification and uses the shared bidirectional Control endpoint for control messages. The Data Class interface includes two bulk endpoints for data traffic.

[0546] 8.1 USB Descriptors

[0547] 8.1.1 Device Descriptor

[0548] Native 802.11 USB device is vendor specific class (protocol field is set to 0×ff) USB CDC device. It uses the standard USB CDC device descriptor.

[0549] Native 802.11 USB device should support Microsoft OS Descriptor (MOD), through which the operating system can form the Native 802.11 device identification string (PnP ID). The compatible ID in the Microsoft OS Configuration Descriptor should be “WLAN\×00\×00\0×00\×00”. The sub-compatible ID should be zero. This will cause the OS PnP manager to create compatible device ID “USB\MS_COMP_WLAN”, which will select the OS USB WLAN class driver when there is no IHV specific driver.

[0550] 8.1.2 Configuration Descriptor

[0551] Native 802.11 USB device uses the standard USB CDC configuration descriptor.

[0552] 8.1.3 Communication Class Interface

[0553] This interface contains only one endpoint for device notification. The endpoint descriptor is a standard USB Interrupt-type IN endpoint whose wMaxPacketSize field is 8 bytes.

[0554]

Offset		Size
(bytes)	Field	(bytes)	Value	Description
5	bInterfaceClass	1	0x02	Communication Interface
				Class code
6	bInterfaceSubClass	1	0xff	Vendor Specific
				SubClass
7	bInterfaceProtocol	1	0xff	CDC protocol code for
				vendor specific
				protocol.

[0555] 8.1.4 Data Class Interface The Data Class interface is described by a standard USB Interface Descriptor followed by 3 endpoint descriptors: 2 Bulk-OUT and 1 Bulk-IN endpoint. The maximum packet size is 1024 bytes for high speed configuration. Full speed configuration may not be supported. The first Bulk-OUT endpoint is used for transferring control messages and packets transmitted over the out-of-BSS queue Q0. The 2^nd Bulk-OUT endpoint is used for transferring packets transmitted from the four in-BSS transmission queues Q1˜Q4. See section 6.2.2 for definitions of transmission queues Q0˜Q5. The following notations are used for representing the Bulk-OUT endpoints

• • [0556] Bulk-OUT(0) The first Bulk-OUT endpoint
  • [0557] Bulk-OUT(1) Then 2^nd Bulk-OUT endpoint
  • [0558] Bulk-OUT(*) Any Bulk-OUT endpoint

[0559] The Bulk-IN endpoint is for indicating packets to the host. There is only one end Bulk-IN endpoint.

[0560] 8.1.5 Flow Control

[0561] Transmission Queue Flow control is achieved via the standard USB flow control mechanism as defined in section 8.5.1 in the USB 2.0 Specification.

[0562] 8.2 USB Message on Default Endpoints

[0563] 8.2.1 Device Capabilities

[0564] Host queries various 802.11 capabilities from the device by setting bRequest to 1 in USB Setup transaction.

[0565]

bmRequestType	bRequest	wValue	wIndex	wLength
0xA0	1	Specify the
Direction: Device to		type of
host		capabilities
Type: Class
Recipient: device

[0566] 8.2.1.1 Global Capabilities

[0567] Host queries global capabilities using the following USB setup transaction. In the data transaction, the device should return its global capabilities as defined in section 7.2.1.

[0568]

bmRequestType	bRequest	wValue	wIndex	wLength
0xA0	1	1	0	Size of “Global
				Capability” structure
				defined in section
				7.2.1.

[0569] 8.2.1.2 Radio Capabilities

[0570] Host queries radio capabilities using the following USB setup transaction. In the data transaction, the device should return its radio capabilities for the requested radio.

[0571]

bmRequestType	bRequest	wValue	wIndex	wLength
0xA0	1	2	0	Size of “Radio Cap-
				ability” structure de-
				fined in section 7.2.2.

[0572] 8.2.1.3 Regulatory Domain Capabilities

[0573] Host queries supported regulatory domains using the following USB setup transaction. In the data transaction, the device should return an array of supported regulatory domains. Each regulatory domain entry is 2 byte in length and has the same definition as the IEEE standard MIB dot11RegDomainsSupporteValue.

[0574] Device's behavior is unspecified if wLength is smaller than the required size. Host calculates the size based on NumOfSupportedRegDomains which device returns in the radio capabilities structure.

[0575]

bmRequestType	bRequest	wValue	wIndex	wLength
0xA0	1	3	0	Size of the regulatory
				domain table.

[0576] 8.2.1.4 Supported Band and Channels

[0577] Host queries supported band and channels using the following USB setup transaction. In the data transaction, the device should return an array of supported band/channels. Each entry is type of BandChannel structure defined in section 7.1.4.

[0578] Device's behavior is unspecified if wLength is smaller than the required size. Host calculates the size based on NumOfSupportedChannels which device returns in the radio capabilities structure.

[0579]

bmRequestType	bRequest	wValue	wIndex	wLength
0xA0	1	4	0	Size of the Band-
				Channel table.

[0580] 8.3 USB Message on Bulk-OUT Endpoints

[0581] Native WiFi Bulk-OUT messages always start with the following header. In this revision, host will not concatenate multiple smaller USB messages. Therefore, every native WiFi Bulk-OUT message requires at least one USB write transfer. When the message size exceeds the maximum USB packet size (1024 bytes), it will be split.

[0582]

TABLE 5
Native WiFi Bulk-OUT USB Message Header
Offset		Size
(bytes)	Field	(bytes)	Description
0	Type	4	Any suitable message type code
			may be used.
4	Length	4	Length of message (excluding Type
			and Length field).
8	Message	Length	Message data itself

[0583] Most control messages are sent to devices over the Bulk-Out(0) endpoint (instead of the default endpoint). This is needed for ensure proper synchronization with activities in the air. For example, switching channel and setting cipher keys must be serialized with packet transmissions.

[0584] The following messages are defined for Bulk-Out endpoints

[0585]

TABLE 6
Native WiFi USB Message on Bulk-OUT Endpoints
			Transfer
Code	Name	Description	Type
2	NWF_USB_MSG_TX_PACKET	Message for packet	Bulk-Out(*)
		transmission
5	NWF_USB_MSG_SWITCH_CHANNEL	Switch Band/Channel	Bulk-Out(0)
6	NWF_USB_MSG_GLOBAL_STATE	Turn on/off radio	Bulk-Out(0)
7	NWF_USB_MSG_RADIO_POWER_STATE	Turn on/off radio or set radio	Bulk-Out(0)
		into doze state.
8	NWF_USB_MSG_FLUSH_TX	Flush TX queues	Bulk-Out(0)
9	NWF_USB_MSG_BSS_ENTRY	Set BssEntry	Bulk-Out(0)
10	NWF_USB_MSG_PEER_ENTRY	Set PeerEntry	Bulk-Out(0)

[0586] 8.3.1 NWF_USB_MSG_TX_PACKET

[0587] NWF_USB_MSG_TX_PACKET is transferred over one of the 5 Bulk-OUT endpoints, representing the 5 transmission queues defined in section 6.2.2. The message body for NWF_USG_MSG_TX_PACKET is as following:

[0588]

TABLE 7
NWF_USB_MSG_TX_PACKET
Offset		Size
(bytes)	Field	(bytes)	Description
0	Txld	4	The transmission identifier.
			When TxId is zero, host doesn't care the
			transmission status. It considers the
			transmission as completed as soon as the
			USB write transfer completes.
			When Txld is non-zero, device shall
			report the TX status via
			NWF_USB_MSG_TX_STATUS.
			It shall copy the TxID value into the
			corresponding
			NWF_USB_MSG_TX_STATUS.
			The host uses this field to correlate
			NWF_USB_MSG_TX_PACKET with
			NWF_USB_MSG_TX_STATUS.
4	TxDe-	32	See section 7.4 for TxDescriptor
	scriptor		structure.
36	Packet-	variable	The packet data including MAC header,
	Data		packet body and FCS field. FCS field is
			initialized to 0Xffffffff. Size of packet
			data can be determined by sub-
			tracting packet data offset from
			the total message length.

[0589] 8.3.2 NWF_USB_MSG_BAND_CHANNEL

[0590]

TABLE 8
NWF_USB_MSG_BAND_CHANNEL
Offset		Size
(bytes)	Field	(bytes)	Description
0	BandChannel	2	See section 7.1.4 for BandChannel
			data type.

[0591] 8.3.3 NWF_USB_MSG_RADIO_POWER

[0592]

TABLE 9
NWF_USB_MSG_RADIO_POWER
Offset		Size
(bytes)	Field	(bytes)	Description
0	RadioPowerState	4	See section 7.9.1 for
			RadioPowerState data type.

[0593] 8.3.4 NWF_USB_MSG_FLUSH_TX

[0594]

TABLE 10
NWF_USB_MSG_TX_SUSPENSION_STATE
Offset		Size
(bytes)	Field	(bytes)	Description
0	FlushTxQueue	4	See section 7.9.4 for
			FlushTxQueue data type.

[0595] 8.3.5 NWF_USB_MSG_BSS_ENTRY

[0596]

TABLE 11
NWF_USB_MSG_BSS_ENTRY Set Request
Offset		Size
(bytes)	Field	(bytes)	Description
0	Index	4	The index of the BssEntry
			in the BssTABLE.
4	BssEntry		See section 7.7.1 for
			BssEntry data type.

[0597] 8.3.6 NWF_USB_MSG_PEER_ENTRY

[0598]

TABLE 12
NWF_USB_MSG_BSS_ENTRY Set Request
Offset		Size
(bytes)	Field	(bytes)	Description
0	Index	4	The index of the PeerEntry
			in the PeerTable.
4	PeerEntry		See section 7.8.1 for
			PeerEntry data type.

[0599] 8.4 USB Message on Bulk-IN Endpoint

[0600] Native WiFi Bulk-IN messages always start with the following header. The header format is same as the one used in Bulk-OUT messages.

[0601]

TABLE 13
Native WiFi Bulk-IN USB Message Header
Offset		Size
(bytes)	Field	(bytes)	Description
0	Type	4	Any suitable message type code may
			be used.
4	Length	4	Length of message (excluding Type
			and Length field).
			The length doesn't include padding bytes
			which may be added in multi-message
			transfer.
8	Body	Length	Message data itself

[0602] Multiple smaller USB messages may be concatenated and sent in one single USB transfer. Type field of each message is always aligned to 4-byte boundary. Therefore, padding bytes may be added to USB messages except the last one. Length of message doesn't include the padding bytes. Padding bytes can be uninitialized.

[0603] The following messages are defined on Bulk-IN endpoint.

[0604]

TABLE 14
Native WiFi USB Message on Bulk-IN Endpoints
Code	Name	Description
3	NWF_USB_MSG_TX_STATUS	Message for packet
		transmission completion
4	NWF_USB_MSG_RX_PACKET	Message for packet
		indication

[0605] 8.4.1 NWF_USB_MSG_TX_STATUS

[0606] NWF_USB_MSG_TX_STATUS is transferred over the Bulk-IN endpoint.

[0607]

TABLE 15
NWF_USB_MSG_TX_STATUS
Offset		Size
(bytes)	Field	(bytes)	Description
0	Txld	4	The transmission identifier.
			The device shall set this field with
			the TxId from the corresponding
			NWF_USB_MSG_TX_PACKET.
4	TxStatus	32	See section 7.5 for TxStatus structure.

[0608] 8.4.2 NWF_USB_MSG_RX_PACKET

[0609] NWF_USB_MSG_RX_PACKET is transferred over the Bulk-IN endpoint.

[0610]

TABLE 16
NWF_USB_MSG RX_PACKET
Offset		Size
(bytes)	Field	(bytes)	Description
0	RxDescriptor	32	See section 0 for RxDescriptor
			structure.
32	Packet Data	variable	The packet data including MAC head-
			er, packet body and FCS field. Size
			of packet data can be determined by
			subtracting packet data offset from
			the total message length.

[0611] 8.5 Functionalities Requirements

[0612] 8.5.1 Basic Requirement

[0613] 8.5.1.1 Supported WiFi Functionalities

[0614] The operating system will provide a WiFi USB class driver that implements basic 802.11 functionalities:

• • [0615] Infrastructure station supporting: Open/No Encryption, Open/WEP, Open/1X WEP, WPA-PSK /TKIP, WPA-PSK/AES, WPA/TKIP, WPA/AES, WPA2-PSK/TKIP, WPA2/TKIP, and WPA2/AES
  • [0616] IBSS station supporting “No Encryption” WEP and WPA2-PSK/AES.
  • [0617] Infrastructure Access Point
  • [0618] All the above three will support subset of WMM and 802.11e

[0619] The basic 802.11 functionalities doesn't support

• • [0620] Multi-BSS joining
  • [0621] 802.11 power management
  • [0622] Wake on Wireless LAN
  • [0623] Performance Enhancement, such as hardware accelerated encryption and decryption.

[0624] 8.5.1.2 Device Requirement

[0625] In order to meet the basic requirements, device must implement the following:

• • [0626] Channel Switching as defined in section 7.9.2
  • [0627] All transmission functionalities as defined in section 6.2, 7.4 and 7.5 except the following:
    • [0628] Fragmentation transmission
    • [0629] Packet Encryption
    • [0630] Report the timestamp at which a packet is transmitted
  • [0631] All reception functionalities as defined in section 6.1 and 7.3 except the following:
    • [0632] Packet Decryption
  • [0633] Automatic Beacon Generation:
    • [0634] Device doesn't have to support more than one beacon per beacon group
    • [0635] Device doesn't have to support beacon TxInterval with a value greater than 1.
      • [0636] Therefore, device can contend for IBSS beacon transmission at each TBTT.

[0637] 8.5.1.3 Driver Installation

[0638] The OS supplied WiFi USB class driver will use a compatible device identification string derived from Microsoft OS descriptor. The operating system supplied WiFi USB class driver can be replaced with a signed IHV driver, if one available. IHV supplied driver must use device identification string in the form of USB\VID_v(4)&PID_d(4)&REV_r(4).

[0639] Having now described some embodiments of the invention, it should be apparent to those skilled in the art that the foregoing is merely illustrative and not limiting, having been presented by way of example only. Numerous modifications and other embodiments are within the scope of one of ordinary skill in the art and are contemplated as falling within the scope of the invention. The foregoing description and drawings are by way of example only. In particular, although many of the examples presented herein involve specific combinations of method acts or system elements, it should be understood that those acts and those elements may be combined in other ways to accomplish the same objectives. Acts, elements and features discussed only in connection with one embodiment are not intended to be excluded from a similar role in other embodiments.

[0640] Use of ordinal terms such as “first”, “second”, “third”, etc., in the claims to modify a claim element does not by itself connote any priority, precedence, or order of one claim element over another or the temporal order in which acts of a method are performed, but are used merely as labels to distinguish one claim element having a certain name from another element having a same name (but for use of the ordinal term) to distinguish the claim elements. The use of “including,” “comprising,” or “having,” “containing,” “involving,” and variations thereof herein, is meant to encompass the items listed thereafter and equivalents thereof as well as additional items.