Fast pre-authentication based on proactive key distribution for 802.11 infrastructure networks

ABSTRACT

Recently, user mobility in wireless data networks is increasing because of the popularity of portable devices and the desire for voice and multimedia applications. These applications, however, require fast handoffs among base stations to maintain the quality of the connections. Re-authentication during handoff procedures causes a long handoff latency which affects the flow and service quality especially for multimedia applications. Therefore minimizing re-authentication latency is crucial in order to support real-time multimedia applications on public wireless IP networks.In this paper, we proposed two fast re-authentication methods based on the predictive authentication mechanism defined by IEEE 802.11i security group. We have implemented these methods in an experimental test-bed using freeware and commodity 802.11 hardware and we demonstrate that they provide significant latency reductions compared to already proposed solutions. Conducted measurements show a very low latency not exceeding 50 ms under extreme congested network conditions.

REFERENCES

• 1: Arunesh Mishra , Minho Shin , William Arbaugh, An empirical analysis of the IEEE 802.11 MAC layer handoff process, ACM SIGCOMM Computer Communication Review, v.33 n.2, April 2003 [doi>10.1145/956981.956990]
• 2: A. Mishra M. Shin and W. Arbaugh.: Context Caching using Neighbor Graphs for Fast Handoffs in a Wireless Network. IEEE INFOCOM conference, Hong Kong ,March 2004.
• 3: A. Mishra, M. Shin and W. Arbaugh. : Pro-active Key Distribution using Neighbor Graphs. IEEE Wireless Communications, vol. 11,February 2004.
• 4: Blunk Larry and John Vollbrecht, "PPP Extensible Authentication Protocol (EAP)", IETF RFC 2284, March 1998.
• 5: Cheng Lin Tan , Kin Mun Lye , Stephen Pink, A fast handoff scheme for wireless networks, Proceedings of the 2nd ACM international workshop on Wireless mobile multimedia, p.83-90, August 20-20, 1999, Seattle, Washington, United States [doi>10.1145/313256.313284]
• 6: FreeRadius: The FreeRadius Server Project. URL: http://www.freeradius.org,March 2005.
• 7: H. Velayos and G. Karlsson, "Techniques to Reduce IEEE 802.11b MAC Layer Handover Time" Proc. IEEE ICC, June 2004.
• 8: Hye-Soo Kim, Sang-Hee Park, Chun-Su Park and al. .: Selective Channel Scanning for Fast Handoff in Wireless LAN using NeighborGraph. The 2004 International Technical Conference on Circuits/Systems Computers and Communications (ITC-CSCC2004) Japan, July 2004.
• 9: IEEE 802.11f: IEEE Trial-Use Recommended Practice for Multi-Vendor Access Point Interoperability via an Inter-Access Point Protocol Across Distribution Systems Supporting IEEE 802.11 Operation. IEEE, July 2003.
• 10: IEEE 802.11i: Amendment 6: Medium Access Control (MAC) Security Enhancements. IEEE Computer Society, April 2004.
• 11: IEEE 802.1x: IEEE Standards for Local and Metropolitan Area Networks: Port based Network Access Control. IEEE, June 2001.
• 12: International Telecommunication Union: General Characteristics of International Telephone Connections and International Telephone Circuits. ITU-TG.114, 1988.
• 13: Ishwar Ramani and al.: SyncScan: Practical Fast Handoff for 802.11 Infrastructure Networks. Proceedings of the IEEE INFOCOM Conference, Miami, March 2005.
• 14: Jouni Malinen: Host AP driver for Intersil Prism.URL:http://hostap.epitest.fi/, March 2005.
• 15: M. Kassab, A. Belghith, J.M. Bonnin and H.Idoudi: Réalisation d'un point d'accès logiciel 802.11b .SETIT 2004, Tunisia, March 2004.
• 16: Minho Shin , Arunesh Mishra , William A. Arbaugh, Improving the latency of 802.11 hand-offs using neighbor graphs, Proceedings of the 2nd international conference on Mobile systems, applications, and services, June 06-09, 2004, Boston, MA, USA [doi>10.1145/990064.990076]
• 17: T. Henriksson: Hardware architecture for 802.11b based h.323 voice and image ip telephony terminal. Swedish system-onchip conference2001, Proceedings of the SSoCC, Sweden ,March 2001.
• 18: Sangheon Pack and Yanghee Choi: Fast Inter-AP Handoff using Predictive-Authentication Scheme in a Public Wireless LAN. IEEE Networks, August 2002.
• 19: Sangheon Pack , Yanghee Choi, Pre-Authenticated Fast Handoff in a Public Wireless LAN Based on IEEE 802.1x Model, Proceedings of the IFIP TC6/WG6.8 Working Conference on Personal Wireless Communications, p.175-182, October 23-25, 2002
• 20: Sangheon Pack , Hakyung Jung , Taekyoung Kwon , Yanghee Choi, SNC: a selective neighbor caching scheme for fast handoff in IEEE 802.11 wireless networks, ACM SIGMOBILE Mobile Computing and Communications Review, v.9 n.4, October 2005 [doi>10.1145/1096166.1096172]
• 21: Stefano Avallone and al.: D-ITG, Distributed Internet Traffic Generator. URL: http://www.grid.unina.it/software/ITG/ , May 2005

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

General Terms:
Experimentation, Measurement, Security

Keywords:
IAPP, IEEE 802.11i, WiFi, handover, pre-authentication, re-authentication