Abstract: Embodiments of methods and apparatus for providing integrity protection for management and control traffic of wireless communication networks are generally described herein. Other embodiments may be described and claimed.

Abstract: Embodiments of the present invention provide a method comprising transmitting, by a communication node, an information element (IE), the IE including a feature field indicating whether the communication node operates in accordance with an integrity protection protocol specifically for management frames, and the IE further including an enforcement field that advertises whether the integrity protection protocol for management and control frames is mandatory, and generating, by the communication node, a pairwise transient key (PTK), the PTK including a first plurality of keys and a pairwise integrity key (PIK), wherein the first plurality of keys are configured to protect an integrity of data frames transmitted by the communication node and the PIK is configured to protect an integrity of management frames transmitted by the communication node, wherein management frames are dedicated to management traffic and wherein the first plurality of keys and the PIK are different keys.

Abstract: Embodiments of the present invention provide methods and apparatus for a protected paging indication mechanism within wireless networks including multiple access points. Other embodiments may be described and claimed.

Abstract: Apparatus and methods to establish a secure peer-to-peer link in which the construction of a link authentication and key encryption keys are separated from the session encryption key are described herein. In an embodiment, a secure peer-to-peer link is established in a wireless mesh network.

Abstract: Apparatus and method to negotiate parameters of a policy in establishment of a peer-to-peer link are described herein. In an embodiment, a security policy is negotiated in establishment of a peer-to-peer link in a wireless mesh network.

Abstract: Briefly, in accordance with an embodiment of the invention, an apparatus and method to provide authentication and secure communication is provided. In one example, the method may include transmitting machine credentials of a first device, wherein the machine credentials are used to authenticate the first device so that the first device is able to communicate with a second device after the first device transitions from a first power state to a second power state in response to a command received by the first device from another device, wherein power consumption of the first device in the first power state is less than the power consumption of the first device in the second power state. The first device may be used in either a wired or wireless network.

Abstract: A method and apparatus for distribution of digital certificates. A limited access to networks by use of existing identity information allows distribution of digital certificates.

Abstract: Briefly, in accordance with one embodiment of the invention, a pairwise master key may be utilized to generate nonces for authenticated key exchange during a rekeying event in a wireless local area network.

Abstract: Embodiments of wireless communication devices and methods for protecting broadcasted management control messages from insider forgery in wireless network are generally described herein.

Abstract: Apparatus, systems, and methods described herein may securely update a set of session parameters in a wireless, packet-switched network without having to disconnect a current session and perform a re-association. Other embodiments may be described and claimed.

Abstract: Embodiments of the present invention provide methods and apparatus for a protected paging indication mechanism within wireless networks. Other embodiments may be described and claimed.

Abstract: A method and an apparatus for establishing secured roaming among wireless devices are disclosed. In one embodiment, a first access point requests a first ticket from an authentication server and uses that first ticket to establish a first secured session with a wireless station. In response to a second ticket request from the wireless station through the first secured session, the first access point forwards the second ticket request to the authentication server and also relays a resulting second ticket from the authentication server back to the wireless station.

Abstract: In a wireless network, secure synchronization may be achieved with two messages. A beacon initiator may provide a beacon timestamp field and a beacon nonce to devices in the network. A device in the network that wishes to synchronize with another device may send a message containing a variety of parameters including the beacon timestamp field and the nonce. Upon receipt, the receiving device can check a key included in the message, the beacon timestamp field and the nonce to determine, not only that the sender has a valid key, but that the message has a valid time so that one can be reasonably sure that the message was not simply copied. The receiving device then sends a message response which contains verifiable parameters to enable the message sender to be sure that the sender is communicating with a valid receiver.

Abstract: A method and apparatus for distribution of digital certificates is disclosed. A limited access to networks by use of existing identity information allows distribution of digital certificates.

Abstract: A technique to bootstrap a secure communications channel between devices via a cryptographic key. A key is generated by a first device and a copy of the key is sent to a second device via a short range wireless communication channel so as to provide each device with a shared key. In one embodiment, the short range channel comprises a transponder/transponder reader pair in which the transponder is placed in proximity to the transponder reader to enable communication between the devices. Upon receipt of the shared key, symmetric authenticated key agreement algorithms, one for each device, are executed to cooperatively generate a cryptographic key that is used to provide for a secure communication channel using an encrypted communication protocol based on the cryptographic key. The invention removes the necessity of entering userIDs, passwords, and the like at devices to enable the creation of shared cryptographic keys.