Method and system for securely handling re-connection of client devices to a wireless network
The present disclosure is related to a method and system for securely handling re-connection by a wireless device. The method comprises establishing a connection with a plurality of client devices, wherein the wireless device establishes the connection with the plurality of client devices using a first security configuration and detecting whether a criterion is met to re-establish the connection with the plurality of client devices. The method also comprises dynamically generating a second security configuration to re-establish the connection with the plurality of client devices in response to detecting that the criterion is met. The method further comprises encrypting the second security configuration and sending the encrypted second security configuration to the plurality of client devices to re-establish the connection with the wireless device.
1. A method for securely handling re-connection by a wireless device, the method comprising:
establishing, by the wireless device, a connection with a plurality of client devices using a first security configuration;
sending, by the wireless device, a public key request message to the plurality of client devices upon the successful establishment of connection between the plurality of client devices and the wireless device, wherein the public key request message includes information about crypto groups supported by the wireless device;
receiving, by the wireless device, one or more public key response messages from one or more client devices in response to the public key request message, wherein each of the one or more public key response messages includes a public key associated with a particular client device, and a selected crypto group from the crypto groups;
storing, by the wireless device, a unique identifier associated with each of the one or more client devices along with the public key response message in a re-board list;
detecting, by the wireless device, whether at least one criterion is met to re-establish the connection with the plurality of client devices;
generating, by the wireless device, a second security configuration to re-establish the connection with the plurality of client devices in response to detecting that the at least one criterion is met;
encrypting, by the wireless device, the second security configuration; and
sending, by the wireless device, the encrypted second security configuration to the plurality of client devices to re-establish the connection with the wireless device.
2. The method as claimed in claim 1 , further comprising:
receiving, by the wireless device, a request to re-establish the connection from one or more client devices of the plurality of client devices using the second security configuration; and
reestablishing, by the wireless device, the connection with the one or more client devices of the plurality of client devices based on the second security configuration.
3. The method as claimed in claim 1 , wherein the at least one criterion is
detecting an expiry of a time period associated with the wireless device to reestablish the connection with the plurality of client devices,
detecting an expiry of a time period associated with at least one client device of the plurality of client devices to reestablish the connection with the wireless device,
detecting a vulnerability in the wireless device, or
detecting a vulnerability in the associated with at least one client device of the plurality of client devices.
4. The method as claimed in claim 1 , wherein the first security configuration comprises a first service set identifier (SSID), a first password, or combination of the first SSID and the first password, and wherein the second security configuration comprises a second SSID, a second password, or combination of the second SSID and the second password, the second SSID and the second password being respectively different than the first SSID and the first password.
5. The method as claimed in claim 1 , further comprising:
detecting, by the wireless device, an attempt from one or more client devices of the plurality of client devices to connect the wireless device using the first security configuration after the wireless device is configured with the second security configuration;
verifying, by the wireless device, an identifier associated with each of the one or more client devices of the plurality of client devices against the stored unique identifier in the re-board list; and
generating, by the wireless device, a common secret key for each of the one or more client devices stored in the re-board list upon successful verification, wherein the common secret key is generated using the public key associated with the particular client device and a private key associated with the wireless device.
6. The method as claimed in claim 5 , further comprising:
sending a public key associated with the wireless device along with the encrypted second security configuration,
wherein the encrypted second security configuration is encrypted using the common secret key.
7. A method for re-connecting a client device to a wireless device, the method comprising:
establishing, by the client device, a connection with the wireless device;
receiving, by the client device, a public key request message from the wireless device upon the successful establishment of connection between the wireless device and the client device, wherein the public key request message includes information about crypto groups supported by the client device;
sending, by the client device, a public key response message to the wireless device in response to the public key request message, wherein the public key response message includes a public key associated with the wireless device, and a selected crypto group from the crypto groups;
detecting, by the client device, a change in configuration of the wireless device from a first security configuration to a second security configuration in response to disconnection of the established connection;
receiving, by the client device, an encrypted second security configuration from the wireless device;
decrypting, by the client device, the encrypted second security configuration; and
re-connecting, by the client device, to the wireless device using the decrypted second security configuration.
8. The method as claimed in claim 7 , further comprising:
receiving, by the client device, the encrypted second security configuration along with a public key of the wireless device.
9. The method as claimed in claim 7 , wherein decrypting the encrypted second security configuration comprises:
generating, by the client device, a common secret key using the public key of the wireless device and a private key associated with the client device; and
decrypting the encrypted second security configuration using the generated common secret key.
10. A wireless device for securely handling re-connection, the wireless device comprising:
a memory; and
a processor, coupled to the memory, configured to:
establish a connection with a plurality of client devices, wherein the wireless device establishes the connection with the plurality of client devices using a first security configuration;
send a public key request message to the plurality of client devices upon the successful establishment of connection between the plurality of client devices and the wireless device, wherein the public key request message includes information about crypto groups supported by the wireless device;
receive one or more public key response messages from one or more client devices in response to the public key request message, wherein each of the one or more public key response messages includes a public key associated with a particular client device, and a selected crypto group from the crypto groups; and
store a unique identifier associated with each of the one or more client devices along with the public key response message in a re-board list,
detect whether at least one criterion is met to reestablish the connection with the plurality of client devices;
generate a second security configuration to reestablish the connection with the plurality of client devices in response to detecting that the at least one criterion is met;
encrypt the second security configuration; and
send the encrypted second security configuration to the plurality of client devices to reestablish the connection with the wireless device.
11. The wireless device as claimed in claim 10 , wherein the processor is further configured to:
receive a request to re-establish the connection from one or more client devices of the plurality of client devices using the second security configuration; and
reestablish the connection with the one or more client devices of the plurality of client devices based on the second security configuration.
12. The wireless device as claimed in claim 10 , wherein to detect the at least one criterion, the processor is configured to:
detect an expiry of a time period associated with the wireless device to reestablish the connection with the plurality of client devices,
detect an expiry of a time period associated with at least one client device of the plurality of client devices to reestablish the connection with the wireless device,
detect a vulnerability in the wireless device, or
detect a vulnerability in the associated with at least one client device of the plurality of client devices.
13. The wireless device as claimed in claim 10 , wherein the processor is further configured to:
detect an attempt from one or more client devices of the plurality of client devices to connect the wireless device using the first security configuration after the wireless device is configured with the second security configuration;
verify an identifier associated with each of the one or more client devices of the plurality of client devices against the stored unique identifier in the re-board list; and
generate a common secret key for each of the one or more client devices stored in the re-board list upon successful verification, wherein the common secret key is generated using a public key associated with the particular client device and a private key associated with the wireless device.
14. A client device for securely reconnecting with a wireless device, the client device comprising:
a memory; and
a processor, coupled to the memory, configured to:
establish a connection with the wireless device;
receive a public key request message from the wireless device upon the successful establishment of connection between the wireless device and the client device, wherein the public key request message includes information about crypto groups supported by the client device;
send a public key response message to the wireless device in response to the public key request message, wherein the public key response message includes a public key associated with the wireless device, and a selected crypto group from the crypto groups;
detect a change in configuration of the wireless device from a first security configuration to a second security configuration in response to disconnection of the established connection;
receive an encrypted second security configuration from the wireless device;
decrypt the encrypted second security configuration; and
re-connect to the wireless device using the decrypted second security configuration.
15. The client device as claimed in claim 14 , wherein the processor is further configured to receive the encrypted second security configuration along with a public key of the wireless device.
16. The client device as claimed in claim 14 , wherein to decrypt the encrypted second security configuration, the processor is configured to:
generate a common secret key using a public key associated with the wireless device and a private key associated with the client device; and
decrypt the encrypted second security configuration using the generated common secret key.