Accelerated reconnection in authenticated networks
A method in a client computing device includes: establishing an association with a communications network in a first connection time period; via an authentication session with an authentication server of a communications network in an authentication time period following the first connection time period, obtaining at least one key value for use in accessing the communications network; storing reauthentication data associated with the at least one key value; responsive to disconnecting from the communications network, discarding the at least one key value and retaining the reauthentication data; responsive to a reconnection command: deriving the at least one key value from the reauthentication data, establishing a further association with the communications network in a second connection time period by sending an association request to the communications network, the association request containing the at least one key value, and accessing network resources via the communications network following the second connection time period.
1. A method in a client computing device, the method comprising:
establishing an association with a communications network in a first connection time period;
via an authentication session with an authentication server of the communications network in an authentication time period following the first connection time period, obtaining at least one key value for use in accessing the communications network;
storing reauthentication data associated with the at least one key value;
responsive to disconnecting from the communications network, discarding the at least one key value from a memory of the client computing device and retaining the reauthentication data having an intermediate key value from a root key, where the intermediate key value is associated to a particular access point;
responsive to a reconnection command:
deriving the discarded at least one key value from the intermediate key value of the root key,
establishing a further association with the communications network in a second connection time period by sending an association request to the communications network, the association request containing the at least one key value, and
accessing network resources via the communications network following the second connection time period.
2. The method of claim 1 , wherein storing the reauthentication data includes storing the reauthentication data in a persistent storage device.
3. The method of claim 1 , further comprising storing an identifier of the communications network in association with the reauthentication data.
4. The method of claim 3 , wherein the reconnection command includes a reconnection network identifier; the method further comprising:
prior to retrieving the at least one key value, determining that the reconnection network identifier matches the identifier stored in association with the reauthentication data.
5. The method of claim 1 , further comprising:
after a time period, discarding the reauthentication data.
6. The method of claim 1 , further comprising:
receiving, in response to the association request, a reauthentication command from an access point;
repeating the authentication process to obtain at least one further key value; and
storing further reauthentication data associated with the at least one further key value.
7. A computing device, comprising:
a memory;
a communications interface; and
a controller configured to:
establish an association with a communications network in a first connection time period;
via an authentication session with an authentication server of the communications network in an authentication time period following the first connection time period, obtain at least one key value for use in accessing the communications network;
store, in the memory, reauthentication data associated with the at least one key value;
responsive to detecting a disconnection from the communications network, discard the at least one key value from the memory and retaining the reauthentication data having an intermediate key value from a root key, where the intermediate key value is associated to a particular access point;
responsive to a reconnection command:
derive the discarded at least one key value from the intermediate key value of the root key,
establish a further association with the communications network in a second connection time period by sending an association request to the communications network, the association request containing the at least one key value, and
access network resources via the communications network following the second connection time period.
8. The computing device of claim 7 , further comprising a secure memory;
wherein the controller is configured, to store the reauthentication data, to store the reauthentication data in a persistent storage device.
9. The computing device of claim 7 , wherein the controller is further configured to store an identifier of the communications network in association with the reauthentication data.
10. The computing device of claim 9 , wherein the reconnection command includes a reconnection network identifier; the controller further configured to:
prior to retrieving the at least one key value, determine that the reconnection network identifier matches the identifier stored in association with the reauthentication data.
11. The computing device of claim 7 , wherein the controller is further configured, after a time period, to discard the reauthentication data.
12. The computing device of claim 7 , wherein the controller is further configured to:
receive, in response to the association request, a reauthentication command from an access point;
repeat the authentication process to obtain at least one further key value; and
store further reauthentication data associated with the at least one further key value.
13. A non-transitory computer readable medium storing instructions executable by a controller of a computing device having a memory and a communications interface, to:
establish an association with a communications network in a first connection time period;
via an authentication session with an authentication server of the communications network in an authentication time period following the first connection time period, obtain at least one key value for use in accessing the communications network;
store, in the memory, reauthentication data associated with the at least one key value;
responsive to detecting a disconnection from the communications network, discard the at least one key value from the memory and retain the reauthentication data having an intermediate key value from a root key, where the intermedia key value is associated to a particular access point;
responsive to a reconnection command:
derive the discarded at least one key value from the intermediate key value of the root key,
establish a further association with the communications network in a second connection time period by sending an association request to the communications network, the association request containing the at least one key value, and
access network resources via the communications network following the second connection time period.
14. The non-transitory computer readable medium of claim 13 , wherein execution of the instructions configures the controller, to store the reauthentication data, to store the reauthentication data in a persistent storage device.