Key management for fast transitions

A method for facilitating fast handoffs in a wireless local area network (WLAN) that comprises an access point and other access points, wherein the method comprises:

• determining and storing topography information specifying radio-frequency (RF)-neighbor access points for the access point and the other access points based on the communication between the access point and the other access points;
• when the access point associates with an electronic device, designating the access point as a master access point in the WLAN for the electronic device;
• generating, based on a pre-shared key (PSK), a pairwise master key (PMK) associated with the access point and the electronic device;
• using a four-way handshake with the electronic device, calculating a pairwise transient key (PTK) to enable secure communication with the electronic device;
• generating and distributing secondary PMKs to RE-neighbor access points of the access point based on the topography information, wherein each of the secondary PMKs are unique, and wherein the secondary PMKs facilitate fast basic service set (BSS) transitions with the electronic device when a handover occurs without using the four-way handshake to establish secure communication with the electronic device;
• receiving association information from a second access point in the RE-neighbor access points of the access point that indicates that the electronic device has associated with the second access point;
• and
• in response to the association information:
• providing instructions to delete the secondary PMKs at the RE-neighbor access points of the access point;
• and
• providing additional secondary PMKs to RF-neighbor access points of the second access point.

A non-transitory computer-readable storage medium for use in conjunction with an access point, the computer-readable storage medium storing program instructions, wherein, when executed by the access point, the program instructions cause the access point to perform operations that facilitate fast handoffs in a wireless local area network (WLAN) that comprises an access point and other access points, the operations comprising:

• determining and storing topography information specifying radio-frequency (RF)-neighbor access points for the access point and the other access points based on the communication between the access point and the other access points;
• designating, when the access point associates with an electronic device, the access point as a master access point in the WLAN for the electronic device;
• generating, based on a pre-shared key (PSK), a pairwise master key (PMK) associated with the access point and the electronic device;
• calculating, using a four-way handshake with the electronic device, a pairwise transient key (PTK) to enable secure communication with the electronic device;
• generating and distributing secondary PMKs to RF-neighbor access points of the access point based on the topography information, wherein each of the secondary PMKs are unique, and wherein the secondary PMKs facilitate fast basic service set (BSS) transitions with the electronic device when a handover occurs without using the four-way handshake to establish secure communication with the electronic device;
• receiving association information from a second access point in the RF-neighbor access points of the access point that indicates that the electronic device has associated with the second access point;
• and
• in response to the association information:
• providing instructions to delete the secondary PMKs at the RF-neighbor access points of the access point;
• and
• providing additional secondary PMKs to RE-neighbor access points of the second access point.