PRIVATE SIMULTANEOUS AUTHENTICATION OF EQUALS

摘要

A passphrase is assigned to an end user device for use in authenticating the end user device for a network using SAE. An identification of the end user device is determined during an authentication process. The passphrase assigned to the end user device is determined at a network side using the identification of the end user device. A shared secret is generated using the passphrase. Whether the end user device has generated the shared secret is determined. The end user device is authenticated for the network, if it is determined that the end user device has generated the shared secret.

主权项

1. A method comprising:
assigning a passphrase to an end user device; storing the passphrase in association with an identifier of the end user device; determining the end user device is attempting to authenticate at a wireless network device; receiving identifying information from the end user device over a wireless medium; using the identifying information to obtain the passphrase; generating a shared secret using the passphrase; determining whether the end user device has generated the shared secret without transmitting the passphrase over the wireless medium; authenticating the end user device at a wireless network associated with the wireless network device if it is determined the end user device has generated the shared secret.