A secure wireless LAN system retaining privacy

We propose a secure wireless LAN system for casual users at event sites or Hotspots who want safer and easier access to the networks. It protects users' privacy by creating separated SSL sessions for each user, while the WEP shares one encryption key among all users. In the proposed system, in order to access the Internet, a user shows "SPKI-based authorization ticket" in SSL client-authentication phase instead of an ordinary X.509 certificate. The SPKI-based authorization ticket proves that the user has appropriate rights from the system while not showing his/her ID. A user can also access the Internet in another way that the user does not register his/her ID in contrast with existing secure wireless LAN systems. The proposed system restricts usable protocols and prevents unauthorized user from attacking to the Internet. By hiding user IDs from gateways, a user can retain his/her privacy. Moreover, the proposed system can be easily installed without modifying existing wireless LANs.