WPA3 Wi-Fi Onboarding Using WPA2 Binding and BSS Transition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Wi-Fi networks transitioning to WPA3 face challenges with DPSK incompatibility, leading to cumbersome and time-consuming onboarding of electronic devices due to enhanced security requirements.
Innovation Solution
Implementing a dual-WLAN approach with WPA2 and WPA3 compatibility, allowing initial connection via WPA2 and establishing a binding for seamless transition to WPA3, without requiring cryptographic calculations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If WPA3 authentication protocol is implemented to enhance security, then security protection is improved, but device onboarding becomes more complicated and time-consuming
Solution Approach 1:
The system performs preliminary actions by establishing a binding between the passphrase and the WPA3 network in advance through a simplified WPA2-based initial connection. This preliminary binding establishment allows the device to be pre-authenticated and registered in the network's authentication server before actual WPA3 authentication is required, reducing the complexity of the onboarding process while maintaining security.
Solution Approach 2:
The patent introduces an intermediary mechanism by using a WPA2-compatible authentication protocol as a bridge between the device and the WPA3-protected network. The access point acts as an intermediary that first establishes a WPA2 connection, then uses this connection to set up the WPA3 binding, finally transitioning to WPA3 authentication. This intermediary approach simplifies the onboarding process while ensuring WPA3 security protection.
2Reliability
If WPA3 authentication protocol is implemented to enhance security, then security protection is improved, but authentication time increases
Solution Approach 1:
The system performs the binding establishment between passphrase and network identifier in advance during the initial WPA2 connection phase. This preliminary action stores the authentication credentials and binding information in the authentication server before WPA3 authentication is needed, so that when actual WPA3 authentication occurs, the system can quickly verify pre-established bindings rather than performing complex cryptographic calculations from scratch.
Solution Approach 2:
The patent changes the authentication parameters by transitioning from a single WPA3 authentication flow to a two-phase approach: initial WPA2 authentication with binding establishment, followed by WPA3 authentication with pre-established bindings. This parameter change allows the system to use simpler initial authentication to set up security credentials, then leverage those pre-established parameters for faster subsequent WPA3 authentication.
Data Source
AI summary
In response to an association request associated with an electronic device to a second WLAN that uses a WPA3-compatible authentication protocol, an access point may establish a connection with an electronic device using the second WLAN when a binding between a passphrase associated with the electronic device and the second WLAN exists in a computer system. Alternatively, when the binding does not exist, the access point may reject the association request. Instead, the access point may establish a second connection with the electronic device using a first WLAN that uses a WPA2-compatible authentication protocol, and may establish the binding in a computer system. Next, the access point may perform a BSS transition of the electronic device from the first WLAN to the second WLAN. Furthermore, the access point may perform authentication of the electronic device after the connection or the second connection is established.