Analysis of Secure handover for IEEE 802.1X based Ad-Hoc Networks

The handover procedure in secure communication wireless networks is an extremely time-consuming phase and it represents a critical issue in relation to time constraints required by certain real time traffic applications. In particular, in the case of IEEE 802.1X model, most of the time needed for a handover is used for packet exchanges necessary for authentication protocols, such as EAP-TLS, that needs an 8- way handshake. Designing secure re-authentication protocols to reduce the number of packets needed during a handover is an open issue that is gaining interest with the advent of a pervasive model of networking, requiring real-time traffic and mobility. This paper presents the 802.1X model and evaluates its application to ad-hoc networks based on IEEE 802.11i or IEEE 802.16e standards, focusing on the problems that must be evaluated when designing handover procedures and suggesting guidelines for securing handover procedures. It also presents a novel protocol to perform secure handovers that is respectful of the previous analysis and that has been implemented in a mesh environment.