TL;DR: In this paper, a credential provisioning technique is provided that is secure yet easy to administer, such that a network AP is configured to leave a secure mode of operation and allow open authentication with a wireless supplicant.
Abstract: A credential provisioning technique is provided that is secure yet easy to administer. A credential provisioner such as a network AP is configured to leave a secure mode of operation and allow open authentication with a wireless supplicant. After open authentication is established, the wireless supplicant requests credential provisioning. In response, the credential provisioner supplies the supplicant with an encrypted password. To prevent unauthorized access, the supplicant again requests credential provisioning but also proves knowledge of the encrypted password. At least one credential is supplied to the wireless supplicant in response to the proof only if a waiting period expires with just one request for credential provisioning being received by the credential provisioner.
TL;DR: A fast and efficient way of switching a wireless node (WN) between different Access Points (AP) in an Infrastructure Wireless Network is presented and it is shown that Centralized model has a little edge over the distributed model.
Abstract: We present a fast and efficient way of switching a wireless node (WN) between different Access Points (AP) in an Infrastructure Wireless Network Our proposed model adheres to the security standards set by IEEE 80211i draft New architectures like 80211i and Robust Secure Network (RSN) mainly depend on the 8021x communication between a Wireless supplicant node and an Authentication Server (AS) followed by a 4-Way handshake between Wireless Supplicant node and Access Point Reassociation with another AP also requires a four way handshake We propose two models for transitions The first model is based on Distributed approach while the second one is based on Centralized approach Distributed model involves AP to AP direct communication without the involvement of AS while in Centralized model APs communicate through AS We show that both the models are very efficient, secure and deny any kind of man in the middle attack, any rogue attack by wireless node or an AP and any kind of Denial of Service attack Finally, we show that Centralized model has a little edge over the distributed model