PREVENTING ATTACKS IN A MIXED WPA2 AND WPA3 ENVIRONMENT

Abstract

This disclosure provides methods, devices and systems for improving security in wireless communication networks. An example method includes scanning a wireless medium for a presence of access points (APs) in a wireless communication range of the first wireless STA, identifying, based on the scanning, two or more APs each having a same first Service Set Identifier (SSID), the two or more APs including a first AP that supports a Wi-Fi Protected Access (WPA) 3 wireless security protocol and a WPA 2 wireless security protocol and including a second AP that supports the WPA 2 wireless security protocol but does not support the WPA 3 wireless security protocol, selecting a first simultaneous authentication of equals (SAE) authentication type for a first group of APs that includes the first AP based on at least one AP of the first group of APs supporting the WPA 3 wireless security protocol, and authenticating with the first AP based at least in part on the same first SSID and the first SAE authentication type.

Documents