ML7065-033 User’s Manual
Chapter 7 Commands
43
7.5 MAC Security Specifications
7.5.1 MAC Security Mode
No-security mode, ACL mode, and security mode are available for MAC. Set a mode by using
macSecurityMode (PIB-ID: 0x76) of MACPIB.
7.5.1.1 No-security Mode
MAC will not execute security processing even if it has received a request primitive for security from the HOST.
It does not execute security processing to received frames either.
When secured data frames are received, MAC will not combine the received frames. Instead, it sets the
security use field to TRUE, sets the ACL entry field to 0x08, and issues a notification by using
MCPS-DATA.INDICATION.
When unsecured data frames are received, MAC will set the security use field to FALSE, sets the ACL entry
field to 0x08, and issues a notification by using MCPS-DATA.INDICATION.
7.5.1.2 ACL Mode
MAC will not execute security processing even if it has received a request primitive for security from the HOST.
It does not execute security processing to received frames either. In ACL mode, only filtering of received
frames based on their source addresses is provided.
When secured data frames are received, MAC will not combine the received frames. It then retrieves source
addresses of received frames from the ACL entry. If the addresses are found in the entry, ACLSecuritySuite of
the retrieved ACLEntryDescriptor will be set in the ACL entry field. The security use field will be then set to
TRUE and notified by MCPS-DATA.INDICATION. If there are no hits in the ACL entry, the ACL entry field
will be set to 0x08.
When unsecure data frames are received, the same processing will be executed as in the case of secured data
frame reception. Note, however, that the security use field is set to FALSE and notified by
MCPS-DATA.INDICATION.
7.5.1.3 Security Mode
MAC executes security processing to the ACL mode functions and transmit / receive frames.
•
Transmit Processing
MAC executes security processing (encryption) to transmit frames when it receives a request primitive with
the security enable bit set to “1.” In order to generate transmit frames to be encrypted, MAC will search for
ACLExtendedAddress, or ACLShortAddress and ACLPANId, that would match with the destination address
within the ACL entry. If retrieval from the ACL entry is successful, MAC will use the security suite and the
security material from ACLEntryDescriptor to encrypt the transmit frames, and then transmit them.
If retrieval from the ACL entry is unsuccessful, the following will occur:
When macDefaultSecurity (PIB-ID: 0x72) is set to TRUE, then a security suite indicated by
macDefaultSecuritySuite (PIB-ID: 0x75) and a security material indicated by macDefaultSecurityMaterial
(PIB-ID: 0x74) will be used to generate transmit frames.
When macDefaultSecurity (PIB-ID: 0x72) is set to FALSE, then the UNAVAILABLE_KEY status will be
notified to the HOST.
