doc.: IEEE /1072r0 Dan Harkins Trapeze Networks

Slides:



Advertisements
Similar presentations
Doc.: IEEE /1186r0 Submission October 2004 Aboba and HarkinsSlide 1 PEKM (Post-EAP Key Management Protocol) Bernard Aboba, Microsoft Dan Harkins,
Advertisements

May 2004 doc.: _wired_wireless_LAN_handover_r0 Samsung AIT Considerations regarding L2&L3 Schemes in 802.3/ Handover Xiaoyu Liu
IEEE P802 Handoff ECSG Submission July 2003 Bernard Aboba, Microsoft Detection of Network Attachment (DNA) and Handoff ECSG Bernard Aboba Microsoft July.
Doc.: IEEE /095r0 Submission January 2003 Dan Harkins, Trapeze Networks.Slide 1 Fast Re-authentication Dan Harkins.
Doc.: IEEE /689r0 Submission November 2002 Dan Harkins, Trapeze Networks.Slide 1 Re-authentication when Roaming Dan Harkins.
Doc.: Handoff_WNG_Presentation r3 Submission July David Johnston, IntelSlide Handoff Presentation to WNG David Johnston.
Doc.: IEEE /533r0 Submission July 2003 Clint Chaplin, Symbol TechnologiesSlide 1 Proposal for Fast Roam Fast Handoff Study Group Clint Chaplin,
Doc.: IEEE /533r3 Submission July 2003 Clint Chaplin, Symbol TechnologiesSlide 1 Proposal for Fast Roam Fast Handoff Study Group Clint Chaplin,
Wireless Design for Voice Last Update Copyright 2011 Kenneth M. Chipps Ph.D.
Cooperation Between Stations in Wireless Networks Andrea G. Forte and Henning Schulzrinne Department of Computer Science Columbia University, New York.
By: Alex Feldman.  A mobile station is connected to the network wirelessly through another device.  In case of WiFi (IEEE ) this would be an access.
Doc: Submission September 2003 Dorothy Stanley (Agere Systems) IETF Liaison Report September 2003 Dorothy Stanley – Agere Systems IEEE.
Handoff in IEEE Andrea G. Forte Sangho Shin Prof. Henning Schulzrinne.
Doc.: IEEE /0377r1 Submission March 2004 Areg Alimian CMC, Bernard Aboba MicrosoftSlide 1 Analysis of Roaming Techniques Areg Alimian Communication.
Doc.: IEEE /0476r3 Submission May 2004 Jesse Walker and Emily Qi, Intel CorporationSlide 1 Pre-Keying Jesse Walker and Emily Qi Intel Corporation.
Doc.: IEEE /540 Submission July 2003 Arunesh Mishra, Min-ho Shin, William Arbaugh, Insun Lee, Kyunghun Jang. Fast handoffs using Fixed Channel.
Doc.: IEEE /1572r0 Submission December 2004 Harkins and AbobaSlide 1 PEKM (Post-EAP Key Management Protocol) Dan Harkins, Trapeze Networks
Doc.: IEEE /0476r2 Submission May 2004 Jesse Walker and Emily Qi, Intel CorporationSlide 1 Pre-Keying Jesse Walker and Emily Qi Intel Corporation.
Submission doc.: IEEE 11-14/0062r0 January 2014 Dan Harkins, Aruba NetworksSlide 1 PMK Caching for FILS Date: Authors:
Doc.: IEEE /084r0-I Submission January 2003 Mishra, Shin, Arbaugh, Lee, Jang Proactive Key Distribution to support fast and secure roaming Arunesh.
Doc.: IEEE /562r1 Submission November 2001 Tim Moore, Bernard Aboba/Microsoft Authenticated Fast Handoff IEEE Tgi Tim Moore Bernard Aboba.
Doc.: IEEE /0707r0 Submission July 2003 N. Cam-Winget, et alSlide 1 Establishing PTK liveness during re-association Nancy Cam-Winget, Cisco Systems.
August 2, 2005draft-vidya-mipshop-fast-handover-aaa-00 Handover Keys using AAA (draft-vidya-mipshop-fast-handover-aaa-00.txt) Vidya Narayanan Narayanan.
Doc.: IEEE /008r0 Submission January 2003 N. Cam-Winget, D. Smith, K. AmannSlide 1 Proposed new AKM for Fast Roaming Nancy Cam-Winget, Cisco Systems.
Doc.: IEEE /1181r0 Submission October 2004 He et alSlide 1 Proposal for Fast Inter-BBS Transitions Xiaoning He Paragon Wireless, Inc. Sunnyvale,
Doc.: IEEE /084r1 Submission January 2003 Mishra, Shin, Arbaugh, Lee, Jang Proactive Key Distribution to support fast and secure roaming Arunesh.
Doc.: IEEE k Submission July 2004 Bernard Aboba, MicrosoftSlide 1 IEEE k Security: A Conceptual Model Bernard Aboba Microsoft.
Doc.: IEEE / i Submission July 2003 Petroni,Arbaugh WAA Associates, LLC.Slide 1 An Empirical Analysis of the 4- way Hand-shake 1 Nick.
Andrea G. Forte Sangho Shin Henning Schulzrinne
Authentication and Upper-Layer Messaging
M. Kassab, A. Belghith, J. Bonnin, S. Sassi
Keying for Fast Roaming
The Network Beacon Announcement scanning method
Proposal for Fast Inter-BBS Transitions
Secure 3-Party Protocol
Roaming Interval Measurements
TSN Architecture Mike Moreton, STMicroelectronics
Opportunistic Wireless Encryption
TDLS TPK Handshake Date: Authors: May 2010 May 2010
September 2008 doc.: IEEE /1003r0 August 2010
Multi-band Discovery Assistance
PEKM (Post-EAP Key Management Protocol)
doc.: IEEE /xxxx February 2004 September 2004
Issue Discussion: KeyRSC (43)
Just-in-time Transition Setup
doc.: IEEE /xxxx February 2004 September 2004
Beacon Protection Date: Authors: July 2018 July 2018
Beacon Protection Date: Authors: May 2018 January 2018
doc.: IEEE /252 Bernard Aboba Microsoft
IEEE k Security: A Conceptual Model
Jesse Walker and Emily Qi Intel Corporation
Discovery of ESS services
Analysis of Roaming Techniques
Fast Roaming Compromise Proposal
May 2006 doc.: IEEE /0601r0 May 2006 Handling the Groupcast Sequence Number for Proxied Device in Multihop Mesh Date: Authors: Notice:
Comment Resolution Summary Letter Ballot 1 Category: RCPI
TGr Authentication Framework
Fast Roaming Compromise Proposal
Beacon Protection Date: Authors: July 2018 July 2018
Fast Roaming Compromise Proposal
The Need for Fast Roaming
Dan Harkins Trapeze Networks
Using The Site Report to Target Potential Roam Candidates
Keying for Fast Roaming
doc.: IEEE /1072r0 Dan Harkins Trapeze Networks
Fast Roaming Observations
TGr Authentication Framework
Thinking About the Site Report
Wireless Network Management Issues: Current Limitations
Site Report Conceptual Model
Presentation transcript:

doc.: IEEE 802.11-04/1072r0 Dan Harkins Trapeze Networks September 2004 doc.: IEEE 802.11-04/1072r0 September 2004 Pretty Good Handoffs Dan Harkins Trapeze Networks Dan Harkins, Trapeze Networks Dan Harkins, Trapeze Networks

Pretty Good Handoffs This group has not defined the word “fast” September 2004 Pretty Good Handoffs This group has not defined the word “fast” How do we know whether a proposal is actually a solution to the problem then? But the ITU has: it’s 50ms The number was not PDOOMA’d Is a 50ms handoff “fast” for us? Is it possible to even do? Dan Harkins, Trapeze Networks

Pretty BAD Handoffs Current handoffs are S-L-O-W Reasons September 2004 Pretty BAD Handoffs Current handoffs are S-L-O-W Charles Wright showed (in 0989) handoffs from 2-8 seconds even without security! Reasons Active scanning is chewing up a significant portion of the handoff latency budget (shown by Areg Alimian and Bernard Aboba showed in 0377), especially bad for a/b/g devices Doing an full 802.1X reauthentication is expensive 802.1X implementations and OSs are not optimized to do an efficient 4way handshake Dan Harkins, Trapeze Networks

September 2004 Pretty Good Handoffs What can be done to fix the problem with handoff latencies Optimize the scanning function! Not in our charter, but is in TGk’s. And TGk is already addressing this problem. Don’t do a full 802.1X reauthentication when handing off! Cache PMKs and just do a 4 way handshake. Fix our 802.1X implementations to “fast switch” packets for the 4way handshake through our kernels. Dan Harkins, Trapeze Networks

September 2004 Pretty Good Handoffs Independent analysis (Bill Arbaugh from Univ of Maryland) shows it is feasible to do a 4 way handshake in under 25ms. “neighbor list” from TGk can give a STA a list of valid APs to which a handoff should be made. This can drastically reduce scan times. Possible to fit an optimized scan and 4way handshake in a 50ms budget without any protocol changes (and with room to spare)! That’s a “Pretty Good” handoff Dan Harkins, Trapeze Networks

Pretty Good Handoffs What about QoS? September 2004 Pretty Good Handoffs What about QoS? (note to presenter: wave hands here) Need some way to set up service (TSPECS) prior to handoff TGk should help with identification of valid APs prior to handoff What other kinds of state needs to be transferred, how long does it take to set-up and how critical is it? Not sure at this point but security state is NOT one Dan Harkins, Trapeze Networks

Pretty Good Handoffs TGk can optimize scan times September 2004 Pretty Good Handoffs TGk can optimize scan times TGi already handles a quick and secure reconnect with PMK caching We can get “pretty good handoffs” already Dan Harkins, Trapeze Networks