Issues of MAC Management Security Month 2002 doc.: IEEE 802.11-02/xxxr0 Nov 2004 Issues of MAC Management Security Jon Edney, Stefano Faccin Nokia Edney, Faccin, Nokia John Doe, His Company

Month 2002 doc.: IEEE 802.11-02/xxxr0 Nov 2004 Objective (our view) Reduce DOS attack by preventing unauthorised disconnect (authenticate MAC addresses) Authenticate and hide information in action frames Hide station identity Edney, Faccin, Nokia John Doe, His Company

Not in Scope (our view) Protecting data frames (beyond what exists) Nov 2004 Not in Scope (our view) Protecting data frames (beyond what exists) Protecting control frames (cost outweighs the benefit) Inventing new key management scheme – protection based on same key hierachy as data frames and authentication frames. Edney, Faccin, Nokia

Nov 2004 Issues to address Status of management frames which occur before keys are established. Avoiding deadlock when one party looses keys to a secure session. Edney, Faccin, Nokia

One preliminary concept Nov 2004 One preliminary concept Station selects MAC address for session Station “registers” selected MAC address with AP in secure way Once registered MAC address is bound to security association Chosen MAC address is mapped to real MAC address Edney, Faccin, Nokia