News
Issue #2002 - 43 (November 2002)
(Updated Nov. 13, 2002)

TECHNOLOGY

WFA Replaces WEP with WPA for WiFi Security

The Wireless Fidelity Alliance is pushing a new standard designed to shore up improve security for Wi-Fi networks. The new standard -- called the The Wi-Fi Protected Access (WPA) -- is aimed at business customers who want better security. WPA will replace the existing Wired Equivalent Privacy (WEP) standard. That security technology uses fixed keys, which can be figured out by readily available software, allowing people to tap into a network. The WPA standard uses Temporal Key Integrity Protocol (TKIP), which generates new keys for every 10K of data transmitted over the network, making it more difficult to access.

Wi-Fi Alliance Announces New Network Security Specification
The Wireless Fidelity Alliance announced a new security specification based on an IEEE standards effort called Wi-Fi Protected Access (WPA) to replace the existing WEP (Wired Equivalent Privacy). This new standard is designed to work in the products on the market today and is expected to first appear in Wi-Fi CERTIFIED products during the first quarter of 2003. Most vendors are expected to offer firmware (programming that is inserted into programmable read-only memory, thus becoming part of a computing device*) and software updates for Wi-Fi CERTIFIED products currently in use. "The Wi-Fi Alliance worked with the Institute of Electrical and Electronics Engineers (IEEE) 802.11 Standards Working Group for Wireless Local Area Networks to deliver a robust wireless LAN security solution meeting the immediate needs of the marketplace. This approach allows the industry to bring a strong, standards-based security solution to the mark et today while giving the IEEE 802.11 Task Group I the time to complete and finalize the full 802.11i Robust Security Network amendment to the existing wireless LAN standard. Security is, and will continue to be, the highest priority for the Wi-Fi Alliance and for the industry," said Wi-Fi Alliance Chairman Dennis Eaton. [* Definition from Whatis.com] (Source: ZDNet News, PCWorld.com, InfoWorld, EE Times) 

The WiFi Alliance announced a new security standard. Called WPA (WiFi Protective Access), it will replace the flawed WEP (Wired Equivalent Privacy) for wireless local-area networking products. The new security specification will be available in the first quarter of next year for all WiFi-compatible products. It also will be forward-compatible with the new 802.11i security specification set for release by this time
next year. While the majority of today's 802.11-based products will support WPA, once WPA goes through a firmware/software upgrade, it will not be compatible with WEP implementations. This will put at
least some pressure on business customers and equipment manufacturers to adopt the improved standard quickly.

For more information: http://www.wifi.org

MobileInfo Comments and Advisory: Security upgrade developments for WiFi LANs continue unabated. We recommend careful planning till standardized interface 802.11i comes along. You better evaluate vendor's ability to upgrade its proprietary implementation to the upcoming standard.

Note: This news release may contain forward-looking statements within the meaning of section 27A of the Securities Act of 1933 and section 21E of Securities Exchange act of 1934 in USA. Similar provisions exist in other countries. There is no assurance that the stipulated plans of vendors will be implemented. MobileInfo does not warrant the authenticity of the information. Readers should take appropriate caution in developing plans utilizing these products, services and technology architectures.  All trademarks used in this summary are the property of their respective owners.