Proactive Credential Caching for Wireless Roaming
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing key generation and hand-off processes in wireless local area networks (WLANs) are time-consuming, leading to network connectivity issues and delays, particularly when a station roams between access nodes, causing disruptions in services that rely on continuous network access, such as in the case of a hospital robot.
Innovation Solution
Implementing a technique that automatically republishes a credential when a station roams between access nodes, allowing the station to quickly reconnect by using a cached credential, thereby reducing the time required for reauthentication and maintaining continuous network access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a station performs a four-way handshake to establish a new key during hand-off, then security is maintained, but the hand-off time increases causing the station to drop off the network
Solution Approach 1:
The access node proactively generates and caches a new PMK before the station actually needs to hand off. This preliminary key generation eliminates the need for time-consuming four-way handshakes during hand-off, as the station can immediately use the pre-cached credential to connect to the new access node.
Solution Approach 2:
The system prepares backup credentials in advance by generating alternative PMKs and caching them at access nodes before hand-off is needed. This cushioning ensures that if the current key becomes invalid or needs renewal, the station can immediately switch to a pre-prepared credential without network disruption.
2Reliability
If a new PMK is created when a station fails to hand off using an existing key, then the station can reconnect, but the reconnection process takes a long time causing service disruption
Solution Approach 1:
The access node pre-generates alternative PMKs and stores them in a credential cache before they are needed. When hand-off failure occurs, the station can immediately use these pre-prepared credentials without initiating time-consuming key generation protocols, thus maintaining service continuity.
Solution Approach 2:
The credential cache acts as an intermediary layer between the station and the key management system. It stores pre-generated PMKs that can be quickly provided to the station during hand-off failures, eliminating the need for direct real-time key generation and reducing reconnection time.
3Adaptability or versatility
If multiple PMKs are created and published to the global cache for roaming stations, then roaming capability is improved, but the credential management complexity and processing time increase
Solution Approach 1:
Instead of managing all PMKs centrally in the global cache, the system distributes credential caching to individual access nodes. Each access node maintains a local credential cache with PMKs relevant to its coverage area, reducing the burden on the central system and simplifying credential management while maintaining roaming capability.
Solution Approach 2:
The credential management system is segmented into distributed credential caches at each access node rather than a single centralized cache. This segmentation allows each access node to independently manage its own credential cache, reducing overall system complexity and improving roaming efficiency.
Data Source
AI summary
In wireless networking, such as per the IEEE 802.11 standard, a technique automatically republishes an authentication credential to a global credential repository. A station can have a first credential, as is created when the station connects to a first access node of a wireless network. Upon trying and failing to connect to a second access node of the wireless network, the station can have a second credential created and published to the global credential repository. In some situations, the station then roams back to the first access node using the first credential. Efficiently, when the station uses the first credential at the first access node, the first credential can be automatically republished as a global credential. The automatic republishing of the first credential can ensure that the station is able to access the wireless network via various access nodes when roaming.