Key handshaking method and system for wireless local area networks
A key handshake method in a wireless local area network (LAN) capable of performing authentication between two wirelessly connected stations by exchanging keys once is provided. Because the security key for authentication can be exchanged by one 4-way handshake between an authenticator and a supplicant in a wireless LAN, an authentication delay can be prevented.
1. A key handshake method in a wireless local area network (LAN) for authentication between wirelessly connected stations, the key handshake method, in a single handshake, comprising:
generating a first nonce at a first station;
transmitting the first nonce from the first station to a second station;
receiving a second nonce from the second station to the first station, and generating a pair-wise transient key (PTK) based on the second nonce; and
installing the PTK in the first station;
wherein the receiving of the second nonce comprises receiving an encrypted group transient key (GTK) from the second station.
2. The key handshake method of claim 1 , further comprising generating the group transient key (GTK) after the receiving of the second nonce from the second station to the first station.
3. The key handshake method of claim 2 , further comprising exchanging a message integrity code (MIC) message between the first and the second stations.
4. The key handshake method of claim 3 , wherein the exchanging of the MIC message comprises encrypting the GTK and transmitting the encrypted GTK together with the MIC message.
5. The key handshake method of claim 2 , further comprising installing the GTK in the first station.
6. A wirelessly connected system comprising:
a first mesh point for generating a pair-wise transient key (PTK) based on a supplicant nonce (SNonce) and based on an authenticator nonce (ANonce) and transmitting the SNonce in a single handshake; and
a second mesh point for generating a pair-wise transient key (PTK) based on a received SNonce and based on an ANonce;
wherein the first mesh point further comprises a group key hand shake controller and is configured to generate and encrypt a group transient key (GTK), and transmit the GTK in the single handshake;
wherein the first mesh point transmits the SNonce and the encrypted group transient key (GTK) to the second mesh point.
7. The system as claimed in claim 6 , wherein the first mesh point receives the PTK and a group transient key (GTK) from the second mesh point.
8. The system as claimed in claim 6 , wherein the second mesh point installs the PTK in the first mesh point.
9. A first wireless station configured to communicate with a second wireless station, the first wireless station comprising:
a 4-way handshake controller;
wherein a first nonce is transmitted through the 4-way handshake controller from the first wireless station to the second wireless station in a single handshake, a second nonce is received from the second wireless station through the 4-way handshake controller of the first station in the single handshake, and the first wireless station generates a pair-wise transient key (PTK) based on the received second nonce;
wherein an encrypted group transient key (GTK) is received through the 4-way handshake controller with the second nonce from the second wireless station in the single handshake.