Password-based authentication in wireless LAN
Authentication in wireless LAN can prevent unauthorized parties from gaining access to the network. Preliminary authentication mechanism specified in IEEE 802.11 standard was compromised as the consequence of WEP vulnerabilities. Thus, the wireless LAN enhanced security task group and IETF have intr...
Main Author: | |
---|---|
Format: | Thesis |
Language: | English |
Published: |
2005
|
Subjects: | |
Online Access: | http://eprints.utm.my/5301/1/GanHockLaiMFKE2006.pdf |
_version_ | 1825909711585673216 |
---|---|
author | Gan, Hock Lai |
author_facet | Gan, Hock Lai |
author_sort | Gan, Hock Lai |
collection | ePrints |
description | Authentication in wireless LAN can prevent unauthorized parties from gaining access to the network. Preliminary authentication mechanism specified in IEEE 802.11 standard was compromised as the consequence of WEP vulnerabilities. Thus, the wireless LAN enhanced security task group and IETF have introduced the IEEE 802.1X port based network access control and Extensible Authentication Protocol (EAP) to secure wireless LAN authentication session. Re-authentication is another critical issue when a supplicant roams to the neighbouring access point. To retain secure communication session and especially in real time applications, the handoff process must be done within the specified time defined by ITU [50]. The objective of the research is two fields; to propose a password-based public key authentication method and to refine the roaming key management in Inter Access Point Protocol (IAPP) with proactive caching approach for fast and secure handoff process. The proposed authentication method fulfills the mandatory requirements of EAP method for wireless LAN [29]. The authentication methods are compared from the aspects of performance, security and usability. Compared to pre-authentication and proactive key distribution method, the refinement on hand off method provides comparable performance and security with lower computational cost. An experimental test bed was setup to compare the efficiency of the proposed authentication method. The result shows that the proposed authentication execution can be completed at 295ms compared to existing methods like TLS which needs over 1000ms. For hand off process, the result still could not meet the time constraint due to the research scope is only covered roaming key management. Besides, password-based authentication method is inherently ease to deploy, manage and is user friendly. |
first_indexed | 2024-03-05T18:06:14Z |
format | Thesis |
id | utm.eprints-5301 |
institution | Universiti Teknologi Malaysia - ePrints |
language | English |
last_indexed | 2024-03-05T18:06:14Z |
publishDate | 2005 |
record_format | dspace |
spelling | utm.eprints-53012020-07-22T04:03:32Z http://eprints.utm.my/5301/ Password-based authentication in wireless LAN Gan, Hock Lai TK Electrical engineering. Electronics Nuclear engineering Authentication in wireless LAN can prevent unauthorized parties from gaining access to the network. Preliminary authentication mechanism specified in IEEE 802.11 standard was compromised as the consequence of WEP vulnerabilities. Thus, the wireless LAN enhanced security task group and IETF have introduced the IEEE 802.1X port based network access control and Extensible Authentication Protocol (EAP) to secure wireless LAN authentication session. Re-authentication is another critical issue when a supplicant roams to the neighbouring access point. To retain secure communication session and especially in real time applications, the handoff process must be done within the specified time defined by ITU [50]. The objective of the research is two fields; to propose a password-based public key authentication method and to refine the roaming key management in Inter Access Point Protocol (IAPP) with proactive caching approach for fast and secure handoff process. The proposed authentication method fulfills the mandatory requirements of EAP method for wireless LAN [29]. The authentication methods are compared from the aspects of performance, security and usability. Compared to pre-authentication and proactive key distribution method, the refinement on hand off method provides comparable performance and security with lower computational cost. An experimental test bed was setup to compare the efficiency of the proposed authentication method. The result shows that the proposed authentication execution can be completed at 295ms compared to existing methods like TLS which needs over 1000ms. For hand off process, the result still could not meet the time constraint due to the research scope is only covered roaming key management. Besides, password-based authentication method is inherently ease to deploy, manage and is user friendly. 2005-12 Thesis NonPeerReviewed application/pdf en http://eprints.utm.my/5301/1/GanHockLaiMFKE2006.pdf Gan, Hock Lai (2005) Password-based authentication in wireless LAN. Masters thesis, Universiti Teknologi Malaysia, Faculty of Electrical Engineering. |
spellingShingle | TK Electrical engineering. Electronics Nuclear engineering Gan, Hock Lai Password-based authentication in wireless LAN |
title | Password-based authentication in wireless LAN |
title_full | Password-based authentication in wireless LAN |
title_fullStr | Password-based authentication in wireless LAN |
title_full_unstemmed | Password-based authentication in wireless LAN |
title_short | Password-based authentication in wireless LAN |
title_sort | password based authentication in wireless lan |
topic | TK Electrical engineering. Electronics Nuclear engineering |
url | http://eprints.utm.my/5301/1/GanHockLaiMFKE2006.pdf |
work_keys_str_mv | AT ganhocklai passwordbasedauthenticationinwirelesslan |