Security of Wi-Fi protected setup procedure
Solutions pertaining to improvement in the security of a Wi-Fi Protected Setup (WPS) procedure are proposed. An access point (AP) determines that a WPS procedure is activated. In response, the AP varies a transmission (Tx) power in transmitting one or more WPS management frames during the WPS procedure. Moreover, the AP configures one or more credentials to a station (STA) in response to receiving one or more management frames from the STA.
1. A method, comprising:
determining that a Wi-Fi Protected Setup (WPS) procedure is activated;
varying a transmission (Tx) power in transmitting one or more WPS management frames during the WPS procedure; and
configuring one or more credentials to a first communication entity responsive to receiving one or more management frames from the first communication entity,
wherein the varying of the Tx power in transmitting the one or more WPS management frames during the WPS procedure comprises:
transmitting one or more regular Beacon frames at a first power level; and
transmitting one or more Beacon frames with a WPS information element (IE) at a second power level lower than the first power level; and
transmitting one or more Authentication frames and one or more Association frames at the second power level lower or a third power level lower than the first power level.
2. A method, comprising:
determining that a Wi-Fi Protected Setup (WPS) procedure is activated;
varying a transmission (Tx) power in transmitting one or more WPS management frames during the WPS procedure; and
configuring one or more credentials to a first communication entity responsive to receiving one or more management frames from the first communication entity,
wherein the varying of the Tx power in transmitting the one or more WPS management frames during the WPS procedure comprises:
receiving one or more Probe Request frames at a first reduced power level;
transmitting one or more Probe Response frames at a second reduced power level responsive to receiving the one or more Probe Request frames; and
transmitting one or more Authentication frames and one or more Association frames at the second reduced power level lower or a third reduced power level,
wherein each of the first reduced power level and the second reduced power level is lower than a regular power level used when the WPS procedure is not activated, and wherein the third reduced power level is lower than the regular power level.
3. An apparatus, comprising:
a transceiver configured to communicate wirelessly; and
a processor coupled to the transceiver and configured to perform operations comprising:
determining that a Wi-Fi Protected Setup (WPS) procedure is activated;
varying a transmission (Tx) power in transmitting one or more WPS management frames during the WPS procedure; and
configuring one or more credentials to a first communication entity responsive to receiving one or more management frames from the first communication entity,
wherein the varying of the Tx power in transmitting the one or more WPS management frames during the WPS procedure comprises:
transmitting one or more regular Beacon frames at a first power level; and
transmitting one or more Beacon frames with a WPS information element (IE) at a second power level lower than the first power level; and
transmitting one or more Authentication frames and one or more Association frames at the second power level lower or a third power level lower than the first power level.