Distributed user authentication in wireless LANs

Abstract

Abstract-An increasing number of mobile devices, including smartphones, use WLAN for accessing the Internet. Existing WLAN authentication mechanisms are either disruptive, such as presenting a captive web page prompting for password, or unreliable, enabling a malicious user to attack a part of operator's infrastructure. In this paper, we present a distributed authentication architecture for WLAN users providing instant network access without manual interactions. It supports terminal mobility across WLAN access points with the Host Identity Protocol (HIP), at the same time protecting the operator's infrastructure from external attacks. User data sent over a wireless link is protected by the IPsec ESP protocol. We present our architecture design and implementation experience on two OpenWrt WLAN access points, followed by measurement results of the working prototype. The system is being deployed into pilot use in the city-wide panOULU WLAN.

PiSA-SA: Municipal Wi-Fi Based on Wi-Fi Sharing

“…Kuptsov et al use HIP to implement a Wi-Fi authentication system that allows HIP clients to connect to a single HIP relay in a city-wide Wi-Fi system [16]. Similar to PiSA and PiSA-SA, the authors use our HIP middlebox authentication extension [6], developed for PiSA.…”

Proposta de Identificação dos Usuários Wireless em Cumprimento com a Lei do Marco Civil: o caso da Universidade do Estado do Pará – Campus XX

“…A solução deste estudo, além de registrar os logs das conexões da rede da instituição, armazena todos os logs de acesso à Internet feitos pelos usuários, o que não é abordado no estudo supracitado. Kuptsov, Khurri and Gurtov (2009) apresentam um esquema de autenticação distribuída para hosts baseado em Host Indentity Protocol (HIP), IETF/RFC 4423, implementado em uma WLAN pública na cidade de Oulu, na Finlândia. Em cada AP da rede, foi configurado um firewall compatível que se comunica com um servidor de proxy HIP central.…”

Security of Wi-Fi on-board intra-vehicular communication: Field trials of tunnel scenario

“…WLAN users are vulnerable to malicious attacks against standard encryption protocol, e.g., WPA (Wi-Fi Protected Access) was cracked several years ago [11], [12].…”

“…In addition, Host Identity Protocol (HIP) was tested because it offers end-to-end security and resistance to previous list of attacks [12]. The overhead due to security for intra-vehicular communication inside a tunnel is discussed in this paper describing briefly the protocols used.…”