Security enhanced IEEE 802.1x authentication method for WLAN mobile router

Along with the diffusion of smart devices that use WLAN, the number of WLAN Hotspot is rapidly increasing. A representative security threat in WLAN environments is hacking using rogue APs (Access Point). To prevent this security threat, the WLAN security standard applies the IEEE 802.1x authentication method. In this authentication method, RADIUS servers authenticate APs using static shared secrets. However, this method is not suitable for WLAN environments where mobile routers are used. Mobile routers are always exposed to device hacking and thus they are subject to very high risks of the leak of shared secrets. Therefore, they require securer authentication methods. In this paper, a new IEEE 802.1x based authentication method of which the security has been enhanced using TPMs (Trusted Platform Module) is proposed. Unlike existing methods, the proposed method involves no risk of authentication key leaks at all and can fundamentally block any attempt of hacking using rogue APs as the server verifies the integrity of APs in the process of authentication.