Secure and fast handover scheme based on pre- authentication method for 802.16/WiMAX infrastructure networks

Abstract

802.16/WiMAX is going to be the most popular technology in wireless communications. In 2006, IEEE 802.16e has been proposed for mobility issue. In order to maintain security, re-authentication should be considered when the mobile station handovers. However, re-authentication often takes latency and consumes power. On the other hand, several fast authentication schemes have been proposed based on preauthentication concept in 802.11/WLAN networks. These schemes provide different methods to enhance the efficiency and security of re-authentication procedure. By using the preauthentication concept, we propose a pre-authentication scheme for WiMAX infrastructures in this paper. Due to flexibility and security, the proposed scheme is combined with the PKI architecture. It provides a secure and fast re-authentication procedure during macro-handover in 802.16/WiMAX networks.

Enhanced inter‐access service network handover authentication scheme for IEEE 802.16m network

“…8: 1. Since the PMK cannot be shared across authenticator domains [10], MS generates new MSK and PMK keys:…”

“…However, the scheme could not avoid the heavy computation cost since the scheme is based on the EAP transport layer security (TLS) authentication protocol. In [7], a handover pre-authentication scheme is proposed to enhance the security and the efficiency of the EAP [10]. Although the scheme prevents denial of service (DoS) and replay attacks and reduces the computation and communication costs of the EAP scheme, it fails to avoid the need to the third party.…”

Enhanced Security Scheme to Support Secure and Fast ASN-anchored Mobility in Mobile WiMAX

“…In this case, the perfect forward and backward secrecy is not guaranteed. In order to solve this problem in our proposed scheme, the authorization key is derived as in (5). That is, the timestamp is included to derive PMK, based on which AK is generated.…”

“…The reason for selecting [7] and [9] for comparison is that they have been designed under the same model of ASN architecture (Standalone Model) similarly to our proposed scheme. On the other hand, other security schemes such as [5][6] [8] have been designed under the Integrated Model and have not specified a detailed security protocol to be analyzed with the security attacks listed in Table 2. The PBS/PFS is classified into 2 types.…”

“…Namely, if the security of one BS is compromised, then this can lead to compromising the security of all previous BSs (backward secrecy) and the following BSs (forward secrecy). To strike a balance between security and performance, several security schemes [5][6] [7][8] [9] have been proposed to reduce the latency due to the authentication after the handover, which are based on the ASN-anchored mobility framework introduced in the WiMAX Forum"s NRM [2]. On the other hand, there are various management messages exchanged among the network entities to complete the handover successfully.…”