Systems and methods for authentication
View Patent ↗A method of performing authentication involves receiving, by a station, an initiation frame and transmitting, by the station, an authentication request. The authentication request includes an extensible authentication protocol (EAP) over local area network (LAN) (EAPOL) Start and security parameters for a fast initial link setup (FILS) handshake.
1. A method of performing a fast initial link setup (FILS) authentication, the method comprising:
receiving, by a station, an initiation frame;
transmitting, by the station, a FILS authentication request comprising
an extensible authentication protocol (EAP) over local area network (LAN) (EAPOL) Start containing the FILS, and
security parameters for a FILS handshake;
receiving, by the station, a first authentication response message formatted for FILS authentication, the message including EAP authentication information;
transmitting, by the station, an association response; and
receiving, by the station, a second authentication response.
2. The method of claim 1 , wherein the initiation frame comprises a beacon frame.
3. The method of claim 1 , wherein the initiation frame comprises a probe response, wherein the method further comprises transmitting, by the station, a probe request prior to receiving the initiation.
4. The method of claim 1 , further comprising performing an EAP authentication protocol exchange.
5. The method of claim 1 , further comprising transmitting, by the station, a key confirmation.
6. The method of claim 1 , further comprising securely communicating, by the station, with an access point (AP).
7. The method of claim 1 , further comprising generating a pairwise master key (PMK).
8. The method of claim 1 , further comprising deriving a pairwise transient key (PTK).
9. The method of claim 8 , further comprising:
installing, by the station, the PTK; and
installing a group temporal key (GTK).
10. A method of performing authentication, the method comprising:
receiving, by an access point, an authentication request comprising
an extensible authentication protocol (EAP) over local area network (LAN) (EAPOL) Start, and
security parameters for a fast initial link setup (FILS) handshake;
transmitting, by the access point, an access request frame; and
receiving, by the access point, an EAP message comprising
an acceptance message,
an EAP success message, and
a pairwise master key (PMK).
11. The method of claim 10 , further comprising transmitting, by the access point, a beacon frame.
12. The method of claim 10 , further comprising:
storing the PMK; and
generating an authorization response.
13. The method of claim 12 , further comprising transmitting, by the access point, an authorization request.
14. The method of claim 10 , further comprising:
receiving, by the access point, an association request; and
transmitting, by the access point, an association response.
15. The method of claim 10 , further comprising:
installing a pairwise transient key (PTK); and
installing an integrity group temporal key (IGTK).
16. The method of claim 10 , further comprising securely communicating, by the access point, with a station.
17. A station comprising:
a processor; and
a computer readable storage medium storing programming for execution by the processor, the programming including instructions to
receive an initiation frame,
transmit an authentication request comprising
an extensible authentication protocol (EAP) over local area network (LAN) (EAPOL) Start, and
security parameters for a fast initial link setup (FILS) handshake
receive a first authentication response message formatted for FILS authentication, the message including EAP authentication information,
transmit an association response, and
receive a second authentication response.
18. The station of claim 17 , wherein the programming further includes instructions to transmit a key confirmation.
19. An access point comprising:
a processor; and
a computer readable storage medium storing programming for execution by the processor, the programming including instructions to
receive an authentication request comprising
an extensible authentication protocol (EAP) over local area network (LAN) (EAPOL) Start, and
security parameters for a fast initial link setup (FILS) handshake,
transmit an access request frame, and
receive an EAP message comprising
an acceptance message,
an EAP success message, and
a pairwise master key (PMK).
20. The access point of claim 19 , wherein the programming further includes instructions to:
install a pairwise transient key (PTK); and
install an integrity group temporal key (IGTK).