System and method to provide enhanced security in a wireless local area network system

• US 20030095663A1
• Filed: 04/04/2002
• Published: 05/22/2003
• Est. Priority Date: 11/21/2001
• Status: Abandoned Application

• Current Assignee: Enterasys Networks Incorporated (Extreme Networks, Inc.)
• Original Assignee: Enterasys Networks Incorporated (Extreme Networks, Inc.)
• Inventors: West, Julian Wray, Durand, Roger P., Nelson, David B.
• Application Number:
  US10/116,447
• Publication Number:
  US 20030095663A1
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A system and method for enhancing Wireless Local Area Network (WLAN) security. The system and method include the generation of a pair of WEP-based encryption keys by a network access point. The key pair is transmitted to one or more clients associated with the access point after the client has been authenticated for access to the network. Each key is preferably randomly generated and the pair is further changed periodically. The timing of the changing of the keys is dependent upon the existing crypto analysis attack capabilities. Individual clients may have unique key pairs or a plurality of clients associated with an access point may share the key pair.

Claims

1. A method for enhancing the security of a wireless local area network including one or more wireless access points associated with one or more clients having a wireless interface card, and a network server, the method comprising the steps of:

a. initiating a network session between one or more of the clients and the network;

b. having the network server authenticate the one or more clients for access to the network via one or more of the access points;

c. generating a pair of encryption keys;

d. transmitting the encryption key pair to the one or more authenticated clients; and

e. periodically replacing the transmitted encryption key pair with a newly generated pair.

2. The method of claim 1 wherein the encryption key pair is randomly generated.

3. The method of claim 1 wherein each access point generates its own encryption key pair.

4. The method of claim 1 wherein each encryption key pair is unique to each client.

5. The method of claim 1 wherein each encryption key pair is shared among all clients associated with a particular access point.

6. The method of claim 1 wherein the encryption key pair is replaced as a function of time.

7. The method of claim 1 wherein the encryption key pair is replaced as a function of frame traffic.

8. The method of claim 1 wherein authentication occurs under IEEE standard 802.1×

.

9. The method of claim 1 wherein the Extensible Authentication Protocol is used to authenticate the one or more clients.

10. The method of claim 1 wherein the generated encryption key pair is used for the Wired Equivalent Privacy algorithm.

11. The method of claim 1 wherein a first one of the encryption key pair is designated a receive key and a second one of the encryption key pair is designated a transmit key.