Using a blockchain for optimized fast-secure roaming on WLANs

An apparatus, comprising:

• one or more network interfaces to communicate with a network;
• a processor coupled to the network interfaces and configured to execute one or more processes;
• and
• a memory configured to store a process executable by the processor, the process when executed configured to:
• receive data regarding a wireless client attempting to form an association between the wireless client and a particular wireless access point in a network during an association phase;
• form the association between the wireless client and the particular wireless access point by:
• querying a blockchain ledger in a blockchain database for wireless roaming data regarding the wireless client, the roaming data regarding the wireless client comprising a roaming history of the wireless client that is indicative of wireless access points with which the wireless client has been associated, wherein the blockchain ledger uses a hashing mechanism to link blocks within the blockchain ledger, the blocks representing a roam activity of the wireless client in the network,
• using, when available from the blockchain ledger, the roaming data regarding the wireless client to complete the association between the wireless client and the particular wireless access point, and
• when the wireless client is roaming to the particular wireless access point from another wireless access point, authenticating the wireless client based on whether an association between the wireless client and the particular wireless access point is listed in the blockchain ledger using the roaming history of the wireless client queried from the blockchain ledger;
• update the blockchain ledger with data regarding the association between the wireless client and the particular wireless access point, wherein the blockchain ledger is a blockchain database of client roam activity of the wireless client in the network;
• determine whether the wireless client is active based on a timer mechanism associated with the blockchain ledger, wherein the timer mechanism is reset when the blockchain ledger is updated with a new block that is indicative of a new roaming event;
• and
• when the timer mechanism associated with the blockchain ledger has expired, remove the blockchain ledger from the blockchain database.

A tangible, non-transitory, computer-readable medium storing program instructions that cause a device to execute a process comprising:

• receiving, at the device, data regarding a wireless client attempting to form an association between the wireless client and a particular wireless access point in a network during an 802.11 association phase;
• forming, by the device, the association between the wireless client and the particular wireless access point by:
• querying, by the device, a blockchain ledger in a blockchain database for wireless roaming data regarding the wireless client, the roaming data regarding the wireless client comprising a roaming history of the wireless client that is indicative of wireless access points with which the wireless client has been associated, wherein the blockchain ledger uses a hashing mechanism to link blocks within the blockchain ledger, the blocks representing a roam activity of the wireless client in the network,
• using, by the device and when available from the blockchain ledger, the roaming data regarding the wireless client to complete the association between the wireless client and the particular wireless access point, and
• when the wireless client is roaming to the particular wireless access point from another wireless access point, authenticating, by the device, the wireless client based on whether an association between the wireless client and the particular wireless access point is listed in the blockchain ledger using the roaming history of the wireless client queried from the blockchain ledger;
• updating, by the device, the blockchain ledger with data regarding the association between the wireless client and the particular wireless access point;
• determining, by the device, whether the wireless client is active based on a timer mechanism associated with the blockchain ledger, wherein the timer mechanism is reset when the blockchain ledger is updated with a new block that is indicative of a new roaming event;
• and
• when the timer mechanism associated with the blockchain ledger has expired, removing, by the device, the blockchain ledger from the blockchain database.