Authentication for relay deployment

摘要

Techniques for proving enterprise mode security for relays are disclosed. For example, enterprise mode security based on IEEE 802.1x is provided for relays or other similar devices to extend the coverage of access point hotspots or other similar access point use cases. According to one aspect, a relay incorporates an authentication client associated with an authentication server. According to another aspect, a four address format is employed for tunneling messages via a relay between a station and an access point. According to another aspect, a cryptographic master key associated with an access point and a station is provided to a relay to enable the relay to be an authenticator for the station.

主权项

1. An apparatus for communication, wherein the apparatus is configured to be associated with a second apparatus, the apparatus comprising:
a processing system configured to authenticate the apparatus to a server; and a communication device configured to:
send a message to the server to authorize the second apparatus as an authenticator;receive an authentication credential from the server as a result of sending the message, wherein the authentication credential is for setting up a session between the server and the second apparatus; andcommunicate with a third apparatus via encrypted messages tunneled and not decrypted by the second apparatus, wherein the third apparatus is associated with the second apparatus and not associated with the apparatus, and each encrypted message comprises an Extensible Authentication Protocol over Local Area Network (EAPOL) message.