Secure authentication system for public WLAN roaming

Authors:
Ana Sanz Merino;Yasuhiko Matsunaga;Manish Shah;Takashi Suzuki;Randy H. Katz
Affiliations:
Computer Science Division, University of California, Berkeley, Berkeley, CA;Computer Science Division, University of California, Berkeley, Berkeley, CA;Computer Science Division, University of California, Berkeley, Berkeley, CA;Multimedia Laboratories, NTT DoCoMo, Inc., Yokosuka, Kanagawa, Japan;Computer Science Division, University of California, Berkeley, Berkeley, CA
Venue:
Mobile Networks and Applications - Special issue: Wireless mobile wireless applications and services on WLAN hotspots
Year:
2005

Citing 3
Cited 3

Strong password-only authenticated key exchange

ACM SIGCOMM Computer Communication Review
Security flaws in 802.11 data link protocols

Communications of the ACM - Wireless networking security
802.11 denial-of-service attacks: real vulnerabilities and practical solutions

SSYM'03 Proceedings of the 12th conference on USENIX Security Symposium - Volume 12

Information-theory based optimal location management schemes for integrated multi-system wireless networks

IEEE/ACM Transactions on Networking (TON)
Authenticated wireless roaming via tunnels: making mobile guests feel at home

Proceedings of the 4th International Symposium on Information, Computer, and Communications Security
Federated access service authorization

ICCOM'06 Proceedings of the 10th WSEAS international conference on Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

A serious challenge for seamless roaming between independent wireless LANs (WLANs) is how best to confederate the various WLAN service providers, each having different trust relationships with individuals and each supporting their own authentication schemes, which may vary from one provider to the next. We have designed and implemented a comprehensive single sign-on (SSO) authentication architecture that confederates WLAN service providers through trusted identity providers. Users select the appropriate SSO authentication scheme from the authentication capabilities announced by the WLAN service provider, and can block the exposure of their privacy information while roaming. In addition, we have developed a compound Layer 2 and Web authentication scheme that ensures cryptographically protected access while preserving pre-existing public WLAN payment models. Our experimental results, obtained from our prototype system, show that the total authentication delay is about 2 seconds in the worst case. This time is dominated primarily by our use of industry-standard XML-based protocols, yet is still small enough for practical use.