A Revised EAP-GPSK Authentication Method with Forward Security

Abstract

The security issues in WLAN have caused wide public concern with its widespread use. IEEE proposed 802.11i which uses authentication method based on the EAP, such as EAP-GPSK, to protect information security in WLAN. In this paper, we analyze EAP-GPSK and find its merits and flaws. It does not provide forward security. Afterwards, we propose a revised EAP-GPSK. In the protocol, the key is updated after successful authentication between peer and server. We analyze our protocol and find it provides mutual authentication, integrity protection, and protects from replay attack. Moreover, it provides forward security and prevents against desynchronization attack.