Security key distribution using key rollover strategies for wireless networks

A method to improve security in a wireless network, the method comprising:

• loading a time period, the time period indicating when at least one new key is to be generated;
• loading a plurality of keys;
• selecting one of the keys as a local transmit key;
• selecting the other keys as receive keys;
• performing the following steps every time period:
• (i) generating at least one new key;
• (ii) using the at least one new key to replace, for each of the at least one keys, one key of the plurality of keys, the at least one new key and any keys not replaced comprising a new plurality of keys;
• and
• (iii) selecting a key of the new plurality of keys as a local transmit key, the local transmit key for a current time period selected to be different than the local transmit key for an immediately proceeding time period.

An apparatus for controlling access to a wireless network, the apparatus comprising:

• a memory that stores computer-readable code;
• and
• a processor operatively coupled to the memory, said processor configured to implement the computer-readable code, said computer-readable code configured to:
• determine a time period, the time period indicating when at least one new key is to be generated;
• load a number of keys, the number set so that a device connected to the wireless network can miss being re-authenticated for a predetermined number of the time periods and still communicate in a secure manner on the wireless network;
• and
• communicate the keys from the controller to the device.

An article of manufacture comprising:

• a computer readable medium having computer readable code means embodied thereon, said computer readable program code means comprising:
• a step to determine a time period, the time period indicating when at least one new key is to be generated;
• a step to load a number of keys, the number set so that a device connected to the wireless network can miss being re-authenticated for a predetermined number of the time periods and still communicate in a secure manner on the wireless network;
• and
• a step to communicate the keys from the controller to the device.

A method performed on a device communicating with a wireless network, the method comprising:

• loading a number of keys in the device, the number set so that the device can miss being re-authenticated for a predetermined number of time periods and still communicate on the wireless network;
• using at least one key of the keys as a transmit key;
• and
• using at least one key of the keys as receive keys.