이병천,

Vol. 29, No. 2, pp. 417-429, Mar. 2019
10.13089/JKIISC.2019.29.2.417, Full Text:
Keywords: Wi-Fi security, WPA2, WPA3, randomized token authentication, dual tokens
Abstract

WPA2-PSK[1,2] uses a 4-way handshake protocol based on a shared secret to establish a secure session between a clientand an AP. It has various security problems such as eavesdropping attacks and the secure session establishment process isinefficient because it requires multiple interactions between client and AP. The WPA3[3] standard has recently beenproposed to solve the security problem of WPA2, but it is a small improvement using the same 4-way handshakemethodology. OAuth 2.0 token authentication[4,5,6] is widely used on the web, which can be used to keep an authenticatedstate of a client for a long time by using tokens issued to an authenticated client. In this paper, we apply the dual-tokenbased randomized token authentication[11,12] technology to the Wi-Fi security protocol to achieve an efficient Wi-Fi securityprotocol by dividing initial authentication and secure session establishment. Once a client is authenticated and equipped withdual tokens issued by AP, it can establish secure session using them quickly with one message exchange over a non-securechannel.

Statistics
Cite this article