Providing multi pre-shared key (mpsk) support on wi-fi protected access (wpa3) clients
AssigneeFortinet, Inc.
InventorsSekhar Sumanth Gorajala Chandra, Yong Zhang
Life of this patent
Estimating the term…
Abstract
An MPSK mode is enabled for an SSID assigned WPA3 capability for the Wi-Fi network. During connection, MAC binding to the specific WPA3 station is configured to provide a unique PSK, including adding the MAC address and the PSK to an MPSK table. A station type of the specific WPA3 station is detected and a VLAN of a plurality of VLANs is assigned based the station type. In turn, the VLAN applies a security policy specific to the station type.
Claims8
A computer-implemented method in a network access device on a Wi-Fi network, for providing multi pre-shared key (MPSK) for Wi-Fi protected access (WPA3) stations, the method comprising:
- enabling MPSK mode for a service set identifier (SSID) assigned WPA3 capability for the Wi-Fi network;
- receiving a new association request including a MAC address and indicating WPA3 capability from a specific WPA3 station;
- authenticating the specific WPA3 station including receiving a PSK;
- configuring MAC binding to the specific WPA3 station to provide a unique PSK, including adding the MAC address and the PSK to an MPSK table;
- detecting a station type of the specific WPA3 station and assigning a virtual local access network (VLAN) of a plurality of VLANs based the station type, wherein the VLAN applies a security policy specific to the station type;
- uploading and downloading data using the unique PSK key over the SSID, according to the VLAN security policy.
A non-transitory computer-readable medium in a network access device on a Wi-Fi network, for providing multi pre-shared key (MPSK) for Wi-Fi protected access (WPA3) stations, the method comprising:
- enabling MPSK mode for a service set identifier (SSID) assigned WPA3 capability for the Wi-Fi network;
- receiving a new association request including a MAC address and indicating WPA3 capability from a specific WPA3 station;
- authenticating the specific WPA3 station including receiving a PSK;
- configuring MAC binding to the specific WPA3 station to provide a unique PSK, including adding the MAC address and the PSK to an MPSK table;
- detecting a station type of the specific WPA3 station and assigning a virtual local access network (VLAN) of a plurality of VLANs based the station type, wherein the VLAN applies a security policy specific to the station type;
- uploading and downloading data using the unique PSK key over the SSID, according to the VLAN security policy.
A network access device on a Wi-Fi network, for providing multi pre-shared key (MPSK) for Wi-Fi protected access (WPA3) stations, the network access device comprising:
- a processor;
- a network interface communicatively coupled to the processor and to the Wi-Fi network;
- and
- a memory, communicatively coupled to the processor and storing modules comprising:
- a mode selection module configured to enable MPSK mode for a service set identifier (SSID) assigned WPA3 capability for the Wi-Fi network;
- a station registration module configured to receive a new association request including a MAC address and indicating WPA3 capability from a specific WPA3 station;
- wherein the station registration module is further configured to authenticate the specific WPA3 station including receiving a PSK;
- a MAC binding module configured to implement MAC binding to the specific WPA3 station to provide a unique PSK, including adding the MAC address and the PSK to an MPSK table;
- a VLAN policy module configured to detect a station type of the specific WPA3 station and assigning a virtual local access network (VLAN) of a plurality of VLANs based the station type, wherein the VLAN applies a security policy specific to the station type;
- wherein the network interface uploads and downloads data using the unique PSK key over the SSID, according to the VLAN security policy.
Dependencies are inferred from the claim text.