Enabling access to key lifetimes for wireless link setup

摘要

A particular method includes performing a bootstrapped extensible authentication protocol (EAP) re-authentication protocol (ERP) re-authentication at a mobile device after performing an EAP authentication with the access point prior to expiration of a master session key (MSK) associated with the EAP authentication. Another particular method includes performing, at an access point, a bootstrapped ERP re-authentication of a mobile device without interrupting a flow of data packets with respect to the mobile device.

主权项

1. A method comprising:
receiving at least one message at a mobile device from an access point; after receiving the at least one message, performing at the mobile device a first extensible authentication protocol (EAP) authentication; after performing the first EAP authentication, performing at the mobile device a first bootstrapped EAP re-authentication protocol (ERP) re-authentication before a master session key (MSK) associated with the first EAP authentication expires; initiating determining, at the mobile device, whether to perform a second EAP authentication or a second bootstrapped ERP re-authentication based on whether a re-authentication Root Key (rRK) has elapsed, wherein an rRK lifetime is accessed by the mobile device; and reducing a value of the rRK lifetime when the second bootstrapped ERP re-authentication is performed and is unsuccessful.