No Long-term Secrets: Location-based Security in Overprovisioned Wireless LANs

Current wireless access control solutions make use of long-term secrets, such as user passwords and private keys, incurring non-trivial management costs while being incapable of defining physical limits for wireless coverage. In this paper we describe an architecture that replaces long-term secrets with overprovisioning, using higher densities of access points in order to provide location-based access control. We show that network administrators can define geographical boundaries for wireless coverage, serving clients with little management overhead while imposing impractical resource demands on attackers outside the intended coverage area.