Derivation method for cached keys in wireless communication system

• US 20060083377A1
• Filed: 10/15/2004
• Published: 04/20/2006
• Est. Priority Date: 10/15/2004
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Ptasinski, Henry S.
• Granted Patent: US 7,558,388 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A method and apparatus for providing improved security and improved roaming transition times in wireless networks. In the present invention, the same pairwise master key (PMK) from an authentication server can be used across multiple access points and a new pairwise transition key (PTK) is derived for each association of a station to any of the access points. A plurality of access points are organized in functional hierarchical levels and are operable to advertise an indicator of the PMK cache depth supported by a group of access points (N) and an ordered list of the identifiers for the derivation path. Access points in each level in the cache hierarchy compute the derived pairwise master keys (DPMKs) for devices in the next lower level in the hierarchy and then deliver the DPMKs to those devices. An access point calculates the PTK as part of the security exchange process when the station wishes to associate to the access point. The station also computes the PTK as part of the security exchange process. The station calculates all the DMPKs in the hierarchy as part of computing the PTK. The method and apparatus of the present invention allows the cache depth to vary per station, but it remains constant for a given station within a key circle.

Claims

1. A system for communicating information over a wireless network, comprising:

an authentication server operable to generate a first authentication key;

a controller operable to receive and store the first authentication key and to generate derived authentication keys therefrom;

a plurality of access points operable to advertise;

the cache depth (N) supported by a group of access points within said plurality of access points;

an ordered list of the identifiers for a derivation path for derived authentication keys;

wherein selected access points are operable to generate transient authentication keys; and

a station operable to associate with selected access points in said plurality of access points and to mutually derive said transient keys therefrom to establish an authenticated connection within said wireless network.

2. The system of claim 1, wherein the first authentication key comprises a pairwise master key.

3. The system of claim 1, wherein the derived authentication keys comprise derived pairwise master keys.

4. The system of claim 1, wherein the transient authentication keys comprise pairwise transient keys.

5. A method for communicating information over a wireless network, comprising:

initiating an association between a station and a first access point, thereby causing an authentication server to generate a first authentication key;

storing the first authentication key in a controller and generating derived authentication keys therefrom;

receiving said derived authentication keys in selected access points in a plurality of access points wherein said plurality of access points are operable to advertise;

the cache depth (N) supported by a group of access points within said plurality of access points;

an ordered list of the identifiers for a derivation path for derived authentication keys;

wherein selected access points are operable to generate transient authentication keys for use by a station; and

associating a station with selected access points in said plurality of access points and receiving transient keys therefrom to establish an authenticated connection within said wireless network.

6. The method of claim 5, wherein the first authentication key comprises a pairwise master key.

7. The method of claim 5, wherein the derived authentication keys comprise derived pairwise master keys.

8. The method of claim 5, wherein the transient authentication key comprises a pairwise transient key.

9. A system for communicating information over a wireless network, comprising:

an authentication server operable to generate a first authentication key;

a plurality of access points operable to advertise;

the cache depth (N) supported by a group of access points within said plurality of access points; and

an ordered list of the identifiers for a derivation path for derived authentication keys;

wherein;

said access points are organized in hierarchal level(s);

selected access points in at least one of said hierarchal level(s) are operable to generate derived authentication keys; and

selected access points in said hierarchal level(s) are operable to generate transient authentication keys; and

a station operable to associate with selected access points in said plurality of access points and to mutually derive said transient keys therefrom to establish an authenticated connection within said wireless network.

10. The system of claim 9, wherein said system further includes at least one architectural level comprising a plurality of controllers operable to generated derived authentication keys.

11. The system of claim 9, wherein said system further includes a plurality of controllers organized in a plurality of architectural levels and wherein controllers in one of said architectural levels are operable to compute derived authentication keys.

12. The system of claim 9, wherein said access points are organized in a single hierarchal level.

13. The system of claim 10, wherein at least one of said access points in said single hierarchal level comprises an authenticator and is operable to generate derived authentication keys.

14. The system of claim 9, wherein the access points are functionally arranged in a plurality of hierarchal levels and wherein access points in each functional level are operable to compute derived authentication keys for use by access points in the next lower level.

15. The system of claim 9, wherein the first authentication key comprises a pairwise master key.

16. The system of claim 9, wherein the derived authentication keys comprise derived pairwise master keys.

17. The system of claim 9, wherein the transient authentication keys comprise pairwise transient keys.

18. A system for communicating information over a wireless network having a plurality of hierarchal functional levels, comprising:

an authentication server operable to generate a first authentication key;

a controller in a first hierarchal level, a said controller being operable to receive and store the first authentication key and to generate derived authentication keys therefrom;

a plurality of access points operable to advertise;

the cache depth (N) supported by a group of access points within said plurality of access points; and

an ordered list of the identifiers for a derivation path for derived authentication keys;

wherein;

said access points are organized in hierarchal level(s);

selected access points in at least one of said hierarchal level(s) are operable to generate derived authentication keys; and

selected access points in said hierarchal level(s) are operable to generate transient authentication keys;

a station operable to associate with selected access points in said plurality of access points and to mutually derive said transient keys therefrom to establish an authenticated connection within said wireless network.

19. The system of claim 18, wherein at least one of said controllers in said first hierarchal level comprises an authenticator.

20. The system of claim 18, wherein said access points are organized in a single hierarchal level.

21. The system of claim 18, wherein the access points are functionally arranged in a plurality of hierarchal levels and wherein access points in each functional level are operable to compute derived authentication keys for use by access points in the next lower level.

22. The system of claim 18, wherein the first authentication key comprises a pairwise master key.

23. The system of claim 18, wherein the derived authentication keys comprise derived pairwise master keys.

24. The system of claim 18, wherein the transient authentication keys comprise pairwise transient keys.