I-D Action: draft-gupta-emu-eap-wsim-01.txt
| Newsgroups | gmane.ietf.announce |
|---|---|
| Message-ID | <178457183374.198504.13305702708772100455@dt-datatracker-d4d6ff9d9-fsx7d> |
Internet-Draft draft-gupta-emu-eap-wsim-01.txt is now available. Title: EAP-WSIM: SIM-Based EAP Authentication for Enterprise Wi-Fi Using the MILENAGE-ML-KEM-FWD Construction Author: Praveen Gupta Name: draft-gupta-emu-eap-wsim-01.txt Pages: 38 Dates: 2026-07-20 Abstract: Enterprise Wi-Fi networks authenticate devices using enterprise credentials and provisioning policies that are entirely independent of MNO subscriber identity. As a result, MNO application traffic on enterprise Wi-Fi is completely anonymous at the Wi-Fi layer: the enterprise cannot identify MNO subscribers, apply per-subscriber QoS, or support fast BSS transitions for VoWiFi continuity. This document specifies EAP-WSIM, an evolutionary enhancement of EAP- AKA' (RFC 9048) that enables MNO devices to authenticate to enterprise Wi-Fi using their existing SIM credential (WSIM-Card) without contacting the MNO backend during authentication. A WSIM- Authentication Server (WSIM-AS) within the enterprise Wi-Fi infrastructure holds MNO-provisioned MASTER KEY material in tamper- resistant security hardware. Per-subscriber MILENAGE key material is derived on-demand from the MASTER KEY using the device's IMSI -- identical in principle to MNO SIM personalization -- entirely within the security hardware boundary. No per-subscriber key provisioning at the WSIM-AS is required. The IETF datatracker status page for this Internet-Draft is: https://datatracker.ietf.org/doc/draft-gupta-emu-eap-wsim/ There is also an HTMLized version available at: https://datatracker.ietf.org/doc/html/draft-gupta-emu-eap-wsim-01 A diff from the previous version is available at: https://author-tools.ietf.org/iddiff?url2=draft-gupta-emu-eap-wsim-01 Internet-Drafts are also available by rsync at: rsync.ietf.org::internet-drafts _______________________________________________ I-D-Announce mailing list -- [email protected] To unsubscribe send an email to [email protected]