Abstract:
Systems, methods, and computer readable mediums for authenticating a device perform a method of receiving, at a second device, a first authentication protocol reauthentication response for the device, the authentication response including a reauthentication master session key (rMSK), transmitting, at the second device, a second first authentication protocol reauthentication response to a first access point based on the reauthentication master session key, generating, at the second device, a first pairwise master key (PMK) based on the reauthentication master session key, generating, at the second device, a key message to include the first pairwise master key, and transmitting, at the second device, the key message to the second access point.
Abstract:
A method includes, at a first device while the first device is connected to a wireless local area network (WLAN) and a second device is unconnected to the WLAN, establishing a secure channel to the second device using an EAP exchange. The method also includes sending at least one credential associated with the WLAN to the second device via the secure channel to enable the second device to connect to the WLAN.
Abstract:
One feature pertains to a method for secure wireless communication at an apparatus of a network. The method includes receiving a user equipment identifier identifying a user equipment and a cryptographic key from a wireless wide area network node, and using the cryptographic key as a pairwise master key (PMK). A PMK identifier (PKMID) is generated based on the PMK and the two are stored at the network. A PMK security association is initialized by associating the PMK with at least the PMKID and an access point identifier identifying an access point of the apparatus. An association request is received that includes a PMKID from the user equipment, and it's determined that the PMKID received from the user equipment matches the PMKID stored. A key exchange is initiated with the user equipment based on the PMK to establish a wireless local area network security association with the user equipment.
Abstract:
A method includes, prior to authenticating a mobile device, receiving by an access point a first message from the mobile device, determining that the mobile device is to be authenticated prior to responding to the first message, and sending to an authentication server a second message that includes an authentication request and the first message. The method also includes receiving from the authentication server a third message that includes a response to the authentication request and that further includes the first message.
Abstract:
This disclosure provides systems, methods and apparatuses for enabling Multiple BSSID functionality. In some implementations, each BSS of the multi-BSS AP may transmit management frames with a Multiple BSSID element (MBE). Multiple BSSID-capable STAs may interpret the MBE information and implement corresponding Multiple BSSID functionality, whereas legacy STAs may ignore the MBE and interpret such frames as legacy management frames. In some other implementations, a multi-BSS AP may configure one or more of its BSSs to transmit management frames without the MBE. These legacy management frames may include a multi-BSS indicator (MBID) to advertise that the corresponding AP is a multi-BSS AP. The MBID also may provide information regarding a transmitted BSS of the multi-BSS AP. Multiple BSSID-capable STAs may search for a transmitted BSS based on the presence of the MBID, whereas legacy STAs may ignore the MBID and interpret such frames as legacy management frames.
Abstract:
Systems, methods, and devices for multicast wireless local area network messages with message authentication are contained herein. The method includes determining a message integrity check value for each of a plurality of wireless devices. The method further includes transmitting a multicast packet to each of the plurality of devices on a wireless local area network, the multicast packet including an indication of each of the plurality of devices and the message integrity check value for each of the plurality of devices.
Abstract:
Apparatuses and methods are disclosed that may allow a wireless device to process an Ethertype data packet encapsulated in a frame based on whether the frame contains an Ethertype Packet Discrimination (EPD) indicator. The wireless device may receive the frame from another wireless device over a wireless network, and may detect a presence of the EPD indicator in the received frame. Then, the wireless device may identify a protocol type of the Ethertype data packet according to an EPD operation based on the presence of the EPD indicator, or may identify the protocol type of the Ethertype data packet according to an LPD operation based on an absence of the EPD indicator.
Abstract:
This disclosure provides systems, methods and apparatuses for enabling Multiple BSSID functionality. In some implementations, each BSS of the multi-BSS AP may transmit management frames with a Multiple BSSID element (MBE). Multiple BSSID-capable STAs may interpret the MBE information and implement corresponding Multiple BSSID functionality, whereas legacy STAs may ignore the MBE and interpret such frames as legacy management frames. In some other implementations, a multi-BSS AP may configure one or more of its BSSs to transmit management frames without the MBE. These legacy management frames may include a multi-BSS indicator (MBID) to advertise that the corresponding AP is a multi-BSS AP. The MBID also may provide information regarding a transmitted BSS of the multi-BSS AP. Multiple BSSID-capable STAs may search for a transmitted BSS based on the presence of the MBID, whereas legacy STAs may ignore the MBID and interpret such frames as legacy management frames.
Abstract:
Systems, methods, and computer readable mediums for authenticating a device are disclosed. In some aspects, a method includes determining, using a second device, a key shared with the first device, generating, by the second device, a first pairwise master key (PMK) based on the key shared with the first device. The method may also include generating, by the second device, a second pairwise master key (PMK) for a first access point based on the first pairwise master key, and one or more properties of the first access point. The method then transmits the second pairwise master key to the first access point. The first access point may use the second pairwise master key to facilitate secure communication with the first device. For example, the first access point may encode/encrypt and/or decode/decrypt messages exchanged with the first device based on the second pairwise master key.
Abstract:
A method includes, at a first device while the first device is connected to a wireless local area network (WLAN) and a second device is unconnected to the WLAN, establishing a secure channel to the second device using an EAP exchange. The method also includes sending at least one credential associated with the WLAN to the second device via the secure channel to enable the second device to connect to the WLAN.