1. doc.: IEEE 802.11-07/0299-00-0wng Submission March 2007 Takeshi Nakamura, Trinity Security Systems, Inc.Slide 1 IPN-WLAN: ‘IPN’ enabled Wireless LANs A new P2P ‘mutual authentication’ technology Notice: This document has been prepared to assist IEEE 802.11. It is offered as a basis for discussion and is not binding on the contributing individual(s) or organization(s). The material in this document is subject to change in form and content after further study. The contributor(s) reserve(s) the right to add, amend or withdraw material contained herein. Release: The contributor grants a free, irrevocable license to the IEEE to incorporate material contained in this contribution, and any modifications thereof, in the creation of an IEEE Standards publication; to copyright in the IEEE’s name any IEEE Standards publication even though it may include portions of this contribution; and at the IEEE’s sole discretion to permit others to reproduce in whole or in part the resulting IEEE Standards publication. The contributor also acknowledges and accepts that this contribution may be made public by IEEE 802.11. Patent Policy and Procedures: The contributor is familiar with the IEEE 802 Patent Policy and Procedures, including the statement "IEEE standards may include the known use of patent(s), including patent applications, provided the IEEE receives assurance from the patent holder or applicant with respect to patents essential for compliance with both mandatory and optional portions of the standard." Early disclosure to the Working Group of patent information that might be relevant to the standard is essential to reduce the possibility for delays in the development process and increase the likelihood that the draft publication will be approved for publication. Please notify the Chair stuart@ok-brit.com as early as possible, in written or electronic form, if patented technology (or technology under patent application) might be incorporated into a draft standard being developed within the IEEE 802.11 Working Group. If you have questions, contact the IEEE Patent Committee Administrator at.http:// ieee802.org/guides/bylaws/sb-bylaws.pdf stuart@ok-brit.compatcom@ieee.org Date: 2007-03-13 Authors:

2. doc.: IEEE 802.11-07/0299-00-0wng Submission March 2007 Takeshi Nakamura, Trinity Security Systems, Inc.Slide 2 Abstract This presentation introduces a new ‘mutual authentication’ technology for IEEE802.11 wireless LANs called ‘IPN-WLAN’. ‘IPN-WLAN’ enables fast and secure mutual authentication between two Wi-Fi endpoints: * Access Points (AP) and Stations (STA). * Access Points (AP) to Access Points (AP). ***For all questions please contact the ‘author’ via email.

3. doc.: IEEE 802.11-07/0299-00-0wng Submission March 2007 Takeshi Nakamura, Trinity Security Systems, Inc.Slide 3 IPN or (Identified Private Network)™ (IPN) is a next generation ISO layer independent security technology that enables secure ‘mutual authentication’ between two ‘peers’ without utilizing RADIUS, CA, or any 3 rd party server infrastructure. (IPN) code is small, fast, and uses minimum CPU cycles: Can easily be employed by low-CPU devices like PDAs, Cell phones, Wi-Fi Access Points, or any device that can take advantage of true P2P ‘mutual authentication’. (IPN) technology takes control of the key management for ‘authentication’ and ‘encryption’ in a device or application. Layer 7 Layer 2 IPN IPN-WLAN ‘IPN’ enabled Wi-Fi

4. doc.: IEEE 802.11-07/0299-00-0wng Submission March 2007 Takeshi Nakamura, Trinity Security Systems, Inc.Slide 4 IPN-WLAN: IPN enabled Wireless LANs IPN-WLAN(IPN-WLAN) is the actual implementation of (IPN) technology for IEEE802.11 wireless LANs at the lower MAC layer (below LLC). IPN-WLAN = (authentication + encryption) / IEEE802.11 IPN-WLAN(IPN-WLAN) uses ‘SAS-2’ protocol at it’s core for achieving mutual authentication. IPN-WLAN(IPN-WLAN) uses ‘AES’ for encryption to secure data.

5. doc.: IEEE 802.11-07/0299-00-0wng Submission March 2007 Takeshi Nakamura, Trinity Security Systems, Inc. Slide 5 SAS-2 or (Simple and Secure Authentication Protocol-version 2) (SAS-2) is a one-time (password) mutual authentication protocol. It has two phases: (one-time)  Registration & (repetitive)  Authentication (SAS-2) is the core behind (IPN-WLAN) protocol to realize true mutual authentication between any two Wi-Fi endpoints. IPN-WLAN = (SAS-2 + AES) - over IEEE802.11 (SAS-2) protocol is modified for the IPN-WLAN implementation. (SAS-2) was developed and published by Professor Dr. Akihiro Shimizu of Kochi University of Technology in Japan. Authentication Encryption

6. doc.: IEEE 802.11-07/0299-00-0wng Submission March 2007 Takeshi Nakamura, Trinity Security Systems, Inc.Slide 6 Key attributes of (IPN-WLAN) Fast: No (RADIUS, CA, or 3 rd party server) requirement for achieving ‘P2P’ mutual authentication. With this dependency eliminated, result is a well needed advantage of securing session ‘continuation’ while mobile. Secure: ‘Authentication’ and ‘Encryption’ keys are changed on a packet-by-packet basis without transmission over the network. Scalable: Another major advantage is the elimination of scalability issues in an (AP)-to-(AP) mutual authentication scenario. Simple: No ‘Supplicant’ and/or ‘Authenticator’ requirement period! Enables fast and secure bi-directional P2P mutual authentication.

7. doc.: IEEE 802.11-07/0299-00-0wng Submission March 2007 Takeshi Nakamura, Trinity Security Systems, Inc.Slide 7 IPN-WLAN PROCESS

8. doc.: IEEE 802.11-07/0299-00-0wng Submission March 2007 Takeshi Nakamura, Trinity Security Systems, Inc.Slide 8 References http://us.trinity-ss.com/white_papers/T-SS_IPN-WLAN_v1.pdf ***For all inquiries please contact the ‘author’ via email.

9. doc.: IEEE 802.11-07/0299-00-0wng Submission March 2007 Takeshi Nakamura, Trinity Security Systems, Inc.Slide 9 Straw Poll Are you interested in a detailed technical presentation on ‘IPN-WLAN’ during the next IEEE802.11 Working Group Plenary (WNG-SC) meeting in July 2007? –YES = –NO = –Not Sure =