Remote access point clustering for user authentication in wireless networks

A system, comprising:

• a memory storing instructions;
• and one or more processors configured to execute the instructions to:
• retrieve, by a first access point from a server hosting a Local Area Network (LAN), an address of a block chain contract;
• for a first access to the LAN by a client device, receive, at the first access point in the LAN, a request from the client device to access a wireless LAN, wherein receiving the request from the client device comprises receiving a user ID and a password from the client device;
• responsive to the request from the client device, access the block chain contract based on the address to activate a function to register the client device by creating authentication credentials for the client device based on an identification of the client device and register the client device as a transaction in the block chain,
• wherein the transaction comprises at least the authentication credentials and a public key of a public-private key pair associated with the client device,
• wherein the private key and the public key are sent from the server to the client device and a controller, respectively, wherein the controller is within the LAN and is coordinating between a plurality of access points within the LAN, wherein the public key is accessible by the plurality of access points and enables the plurality of access points to verify the private key stored in the client device and avoid re-validating the client device, using the server, when roaming through the plurality of access points;
• store the address of the block chain contract in a database accessible, via the controller, by the plurality of access points to allow the access points to access the block chain contract;
• and
• allow the client device to roam from the first access point to a second access point of the plurality of access points when a link between the first access point and the server is down without requesting new authentication credentials, wherein allowing the client device to roam from the first access point to the second access point comprises accessing, by the second access point from the client device, the transaction in order to validate the client device.

A non-transitory, computer-readable medium storing instructions which, when executed by a processor, cause a computer to perform a method, the method comprising:

• retrieving, by a first access point from a server hosting a Local Area Network (LAN), an address of a block chain contract;
• for a first access to a LAN by a client device, receiving, at the first access point in the LAN, a request from the client device to access a wireless LAN, wherein receiving the request from the client device comprises receiving a user ID and a password from the client device;
• responsive to the request from the client device, accessing the block chain contract based on the address to activate a function to register the client device by creating authentication credentials for the client device based on an identification of the client device and registering the client device as a transaction in the block chain,
• wherein the transaction comprises at least the authentication credentials and a public key of a public-private key pair associated with the client device,
• wherein the private key and the public key are sent from the server to the client device and a controller, respectively, wherein the controller is within the LAN and is coordinating between a plurality of access points within the LAN, wherein the public key is accessible by the plurality of access points and enables the plurality of access points to verify the private key stored in the client device and avoid re-validating the client device, using the server, when roaming through the plurality of access points;
• storing the address of the block chain contract in a database accessible, via the controller, by the plurality of access points to allow the access points to access the block chain contract;
• and
• allowing the client device to roam from the first access point to a second access point of the plurality of access points when a link between the first access point and the server is down without requesting new authentication credentials, wherein allowing the client device to roam from the first access point to the second access point comprises accessing, by the second access point, the transaction in order to validate the client device.