Presentation is loading. Please wait.

Presentation is loading. Please wait.

Submission doc.: IEEE 11-14/0062r0 January 2014 Dan Harkins, Aruba NetworksSlide 1 PMK Caching for FILS Date: 2014-01-15 Authors:

Published byMarion Francis Modified over 8 years ago

Similar presentations

Presentation on theme: "Submission doc.: IEEE 11-14/0062r0 January 2014 Dan Harkins, Aruba NetworksSlide 1 PMK Caching for FILS Date: 2014-01-15 Authors:"— Presentation transcript:

1 Submission doc.: IEEE 11-14/0062r0 January 2014 Dan Harkins, Aruba NetworksSlide 1 PMK Caching for FILS Date: 2014-01-15 Authors:

2 Submission doc.: IEEE 11-14/0062r0 January 2014 Dan Harkins, Aruba NetworksSlide 2 Abstract This slide deck describes an enhancement for faster authentication of non-initial FILS connections using PMK caching.

3 Submission doc.: IEEE 11-14/0062r0 FILS Use Case– Tokyo Train Station Slide 3Dan Harkins, Aruba Networks January 2014

4 Submission doc.: IEEE 11-14/0062r0 What About When They Start Moving? Slide 4Dan Harkins, Aruba Networks January 2014

5 Submission doc.: IEEE 11-14/0062r0 Can Subsequent Link Setup be Fast(er)? Slide 5Dan Harkins, Aruba Networks January 2014

6 Submission doc.: IEEE 11-14/0062r0January 2014 Dan Harkins, Aruba NetworksSlide 6 PMK Caching with FILS The I in FILS is initial The result of the Fast Initial Link Setup is a PMKSA PMKSA represents authenticated state, including a key (the PMK) PMKSA can be reused to enable Fast Subsequent Link Setup Many 802.11 deployments use a switch/controller MAC on AP is split, non-real time portion resides on controller 802.1X authenticator is non-real time part of MAC Makes sense to put FILS functionality on controller as well A multitude of APs can be part of a single controller A STA can quickly roam among the multitude of APs, reusing the same PMKSA– PMK Caching

7 Submission doc.: IEEE 11-14/0062r0January 2014 Dan Harkins, Aruba NetworksSlide 7 PMK Caching ISP PMK SA First FILS exchange goes back to ISP Subsequent FILS exchanges only go to controller

8 Submission doc.: IEEE 11-14/0062r0 PMK Caching with FILS PMKSA can be created by public or shared key FILS Once created, a PMKSA is cached Many PMKSAs can be cached at once PMKSAs are identified by a PMKID PMKSAs can be deleted at any time by either STA or AP Should make PMKSAs created by FILS be somewhat short lived STA and AP agree on PMKSA during Auth exchange STA includes (list of) PMKID(s) AP selects (one of) the PMKID(s) FILS “shared key” exchange (but not ERP) PMK from cached PMKSA is used to authenticate FILS exchange PFS is supported! Slide 8Dan Harkins, Aruba Networks January 2014

9 Submission doc.: IEEE 11-14/0062r0January 2014 Dan Harkins, Aruba NetworksSlide 9 References 11-14/0052r*-- PMK Caching with FILS

Download ppt "Submission doc.: IEEE 11-14/0062r0 January 2014 Dan Harkins, Aruba NetworksSlide 1 PMK Caching for FILS Date: 2014-01-15 Authors:"

Similar presentations

Doc.: IEEE 802.11-04/1186r0 Submission October 2004 Aboba and HarkinsSlide 1 PEKM (Post-EAP Key Management Protocol) Bernard Aboba, Microsoft Dan Harkins,

Doc.: IEEE /1186r0 Submission October 2004 Aboba and HarkinsSlide 1 PEKM (Post-EAP Key Management Protocol) Bernard Aboba, Microsoft Dan Harkins,
Doc.: IEEE 802.11-09/0413r0 Submission March 2009 Dan Harkins, Aruba NetworksSlide 1 A Study Group for Enhanced 802.11 Security Date: 2009-03-13 Authors:

Doc.: IEEE /0413r0 Submission March 2009 Dan Harkins, Aruba NetworksSlide 1 A Study Group for Enhanced Security Date: Authors:
Doc.: IEEE 802.11-08/1263r0 Submission November 2008 Dan Harkins, Aruba NetworksSlide 1 A Modest Proposal…. Date: 2008-11-10 Authors:

Doc.: IEEE /1263r0 Submission November 2008 Dan Harkins, Aruba NetworksSlide 1 A Modest Proposal…. Date: Authors:
Doc.: IEEE 802.11-00/087 Submission May, 2000 Steven Gray, NOKIA Jyri Rinnemaa, Jouni Mikkonen Nokia Slide 1.

Doc.: IEEE /087 Submission May, 2000 Steven Gray, NOKIA Jyri Rinnemaa, Jouni Mikkonen Nokia Slide 1.
Doc.: IEEE 802.11-09/1012r0 Submission September 2009 Dan Harkins, Aruba NetworksSlide 1 Suite-B Compliance for a Mesh Network Date: 2009-09-15 Authors:

Doc.: IEEE /1012r0 Submission September 2009 Dan Harkins, Aruba NetworksSlide 1 Suite-B Compliance for a Mesh Network Date: Authors:
Submission doc.: IEEE 11-12/0553r0 May 2012 Jarkko Kneckt, NokiaSlide 1 Response Criteria of Probe Request Date: 2012-05-04 Authors:

Submission doc.: IEEE 11-12/0553r0 May 2012 Jarkko Kneckt, NokiaSlide 1 Response Criteria of Probe Request Date: Authors:
Doc.: IEEE 802.11-08/0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 1 Changes to SAE State Machine Date: 2008-07-13 Authors:

Doc.: IEEE /0836r2 Submission July 2008 Dan Harkins, Aruba NetworksSlide 1 Changes to SAE State Machine Date: Authors:
Submission doc.: IEEE 11-13/0487r0 May 2013 Dan Harkins, Aruba NetworksSlide 1 How To Fragment An IE Date: 2013-05-07 Authors:

Submission doc.: IEEE 11-13/0487r0 May 2013 Dan Harkins, Aruba NetworksSlide 1 How To Fragment An IE Date: Authors:
Doc.: IEEE 802.11-03/095r0 Submission January 2003 Dan Harkins, Trapeze Networks.Slide 1 Fast Re-authentication Dan Harkins.

Doc.: IEEE /095r0 Submission January 2003 Dan Harkins, Trapeze Networks.Slide 1 Fast Re-authentication Dan Harkins.
Doc.: IEEE 802.11-02/689r0 Submission November 2002 Dan Harkins, Trapeze Networks.Slide 1 Re-authentication when Roaming Dan Harkins.

Doc.: IEEE /689r0 Submission November 2002 Dan Harkins, Trapeze Networks.Slide 1 Re-authentication when Roaming Dan Harkins.
Doc.: IEEE 802.11-11/1160 Submission NameAffiliationsAddressPhone George CherianQualcomm 5775 Morehouse Dr, San Diego, CA, USA

Doc.: IEEE /1160 Submission NameAffiliationsAddressPhone George CherianQualcomm 5775 Morehouse Dr, San Diego, CA, USA
Submission doc.: IEEE 11-14/0430r2 March 2014 Dan Harkins, Aruba NetworksSlide 1 Randomized MAC Addresses for Privacy Enhancement Date: 2014-03-18 Authors:

Submission doc.: IEEE 11-14/0430r2 March 2014 Dan Harkins, Aruba NetworksSlide 1 Randomized MAC Addresses for Privacy Enhancement Date: Authors:
Doc.: IEEE 802.11-12/0598r0 Submission May 2012 Steve Grau, Juniper NetworksSlide 1 Layer 3 Setup with Dynamic VLAN Assignment Date: 2012-05-09 Authors:

Doc.: IEEE /0598r0 Submission May 2012 Steve Grau, Juniper NetworksSlide 1 Layer 3 Setup with Dynamic VLAN Assignment Date: Authors:
Doc.: IEEE 802.11-11/1429r0 Submission November 2011 Dan Harkins, Aruba NetworksSlide 1 A Protocol for FILS Authentication Date: 2011-11-01 Authors:

Doc.: IEEE /1429r0 Submission November 2011 Dan Harkins, Aruba NetworksSlide 1 A Protocol for FILS Authentication Date: Authors:
Doc.: IEEE 802.11-12/0567r1 Submission May 2012 Huawei Slide 1 Multiple Frequency Channel Scanning Date: 2012-05-04 Authors: NameAffiliationsAddressPhoneemail.

Doc.: IEEE /0567r1 Submission May 2012 Huawei Slide 1 Multiple Frequency Channel Scanning Date: Authors: NameAffiliationsAddressPhone .
Doc.: IEEE 802.11-12/0537r0 Submission May 2012 Jonathan Segev (Intel)Slide 1 Passive and Active Scanning Mixture Date: 2012-05-02 Authors:

Doc.: IEEE /0537r0 Submission May 2012 Jonathan Segev (Intel)Slide 1 Passive and Active Scanning Mixture Date: Authors:
Submission doc.: IEEE 11-12-0406-03-00ai May 2012 InterDigital, KDDI, Nokia, Huawei, Intel, Qcomm Slide 1 Proposed SFD Text for 802.11ai Passive Scanning.

Submission doc.: IEEE ai May 2012 InterDigital, KDDI, Nokia, Huawei, Intel, Qcomm Slide 1 Proposed SFD Text for ai Passive Scanning.
Submission doc.: IEEE 802.11-15/0809r0 July 2015 Dmitry Cherniavsky, SiBEAM, Inc.Slide 1 Beamforming to Enable Concurrent Links for 802.11ay. Date: 2015-07-07.

Submission doc.: IEEE /0809r0 July 2015 Dmitry Cherniavsky, SiBEAM, Inc.Slide 1 Beamforming to Enable Concurrent Links for ay. Date:
Doc.: IEEE 11-14/1213r0 September 2014 SubmissionSlide 1 Mark Hamilton, Spectralink AP Architectural concepts, and Distribution System Access Function.

Doc.: IEEE 11-14/1213r0 September 2014 SubmissionSlide 1 Mark Hamilton, Spectralink AP Architectural concepts, and Distribution System Access Function.
Doc.: IEEE 802.11-12/933r6 Submission July 2012 Fang Xie (CMCC)Slide 1 Access Control Mechanism for FILS Date: 2012-07-17 Authors: NameAffiliationsAddressPhoneemail.

Doc.: IEEE /933r6 Submission July 2012 Fang Xie (CMCC)Slide 1 Access Control Mechanism for FILS Date: Authors: NameAffiliationsAddressPhone .

Similar presentations

Ads by Google