Searcharxiv⌕ Search
Home/Archive/arXiv

arXiv · 2610.14410

RADIUS-Assisted Companion PSK Discovery: Enabling WPA3-SAE in Externally Authenticated Multi-PSK (ePSK / MPSK / DPSK / iPSK / PPSK) Deployments

Azif Abdul Salam Kolisam Beevi·Anil Kumar Reddy·Niraj Lochan Mahapatra
View original source ↗Read source document ↗Export metadata ↓

Abstract

Large multi-dwelling unit (MDU), student-housing and hospitality networks rarely store resident pre-shared keys (PSKs) on the access point (AP). Instead, the per-resident keys of ePSK, MPSK, DPSK, iPSK or PPSK services are held in an external RADIUS server or cloud database synchronised with the property-management system. Our earlier work, Companion-BSSID-Assisted PSK Discovery (CAPD), brought WPA3-SAE to multi-PSK networks by learning the client's PSK on a WPA2-only companion BSSID and steering the client with IEEE 802.11v to a hidden WPA2/WPA3 primary BSSID of the same SSID. CAPD assumes that the AP can test every PSK itself. This paper removes that assumption. We propose RADIUS-Assisted Companion PSK Discovery (RA-CAPD). The AP forwards the ANonce, the raw EAPOL-Key message 2 (SNonce, MIC, RSNE), the SSID, the client MAC, the BSSID and the AP MAC to the external server in RADIUS vendor-specific attributes (VSAs). The server validates the MIC against all provisioned keys, identifies the matching PSK, and returns it encrypted under the RADIUS shared secret (or a per-AP key for cloud databases), together with the unit, room or user identity and the VLAN. The AP binds the client to this PSK and identity, synchronises the binding across all APs in the domain, and moves the client to the configured profile: 802.11v-capable clients via a BSS Transition Management request, and other clients by disconnection and reconnection. On that profile, SAE-capable clients complete WPA3-SAE and WPA2-only clients complete WPA2-PSK, both with the learned key and no further search, so the companion BSSID serves only for onboarding. We present the design, attribute dictionary, algorithms, complexity and security properties, together with laboratory validation on commercial access points.

Explore related subjects

cs.NI

Keep this discovery

Explore connections, maps & timelines

BibTeXRIS

Azif Abdul Salam Kolisam Beevi, Anil Kumar Reddy, Niraj Lochan Mahapatra. 2026-10-10. RADIUS-Assisted Companion PSK Discovery: Enabling WPA3-SAE in Externally Authenticated Multi-PSK (ePSK / MPSK / DPSK / iPSK / PPSK) Deployments. https://arxiv.org/abs/2610.14410

Cite the original work for its findings. Save a collection to share your selection of sources.

KEEP EXPLORING

Related papers

arXiv2026

Energy Consumption in Next Generation Radio Access Networks

Historically, in macro-cell-based networks, the radio access network (RAN) portion accounts for the largest share of energy consumption in mobile networks. With greater densification, the transition to small cells and increased virtualization of the radio processing functions, the relative energy use of the different network segments is changing. At the same time, open radio access networks (O-RAN) have emerged as a promising approach to support this evolution through open interfaces that enable a multi-vendor environment, support for hierarchical intelligent controls, and simplified, cost-effective radio units that facilitate large-scale deployments. This paper examines the impact of these changes on energy consumption in next-generation RAN architectures through transaction-based energy models. Transaction-based network energy models were developed in 2009 to understand the evolution of energy use in networks. Here we update these models with today's hardware and apply recently developed models for emerging architectures, considering current access point densification trends. Results indicate that efficiency improvements have followed predicted trends, which were largely based on semiconductor Moore's Law-related evolution. Emerging RAN architectures show improved energy per bit, although the processing energy becomes the largest contributor. Densification increases total energy consumption, but the relative contributions of processing and transport energy depend strongly on the location of the baseband processing.

cs.NI↗
arXiv2026

When Unlearning Fails: Reliable Data Deletion under Post-Training in Agent Networks

Embedded AI agents on edge devices can learn as a federation and keep improving after deployment. Each agent collects new trajectories with the current policy, and the edge server aggregates them in later rounds. In such self-improving agent networks, deleting data is harder than a one-time model repair. The data to be deleted may have already shaped later retained trajectories, so retraining or model-side unlearning leaves an influence echo that returns as the network keeps learning. We propose Muting Unlearned Trajectories' Echoes (MUTE) for reliable deletion over edge networks. MUTE traces the echo from a lightweight ledger at the edge server, without moving raw trajectories off the devices. It erases the current residue with a forget-retain update, contains high-influence retained trajectories, and audits later behavior to schedule further erasure under the uplink budget and the response deadline. On LIBERO, MUTE keeps the regenerated share of forgotten behavior at or below 0.401 for every request type, against at least 0.466 for five recent methods.

cs.NI↗
arXiv2026

QoE-Aware Service Function Chain Orchestration in Space-Air-Ground Integrated Networks for In-Flight Internet

In remote regions lacking terrestrial infrastructure, aviation users increasingly demand Internet services comparable to ground cellular networks. This paper proposes a space-air-ground integrated network (SAGIN) architecture that combines ground networks, civil aviation networks, and low Earth orbit (LEO) satellites. Based on real North Atlantic flight data, a heterogeneous aviation Internet is constructed to support diverse aircraft service requirements. A composite Quality of Experience (QoE) metric, characterized by transmission delay, jitter, and content similarity, guides efficient resource utilization. The dynamic connectivity of SAGIN is modeled using a reconfigurable time-expanded graph (RTEG). With Network Function Virtualization (NFV), data delivery is formulated as a Service Function Chain (SFC) deployment across ground stations, relay aircraft, and satellites, resulting in a long-term QoE maximization problem. A tailored Multi-Agent Deep Deterministic Policy Gradient (MADDPG) algorithm incorporating LCSS-based path filtering and softmax-based action selection is developed. Simulation results demonstrate that the proposed approach enables seamless connectivity for heterogeneous aircraft and consistently outperforms game-theoretic and MATD3 methods in terms of QoE.

cs.NI↗