arXiv Science⌕ Search
Home/Archive/arXiv

arXiv · 2610.14410

RADIUS-Assisted Companion PSK Discovery: Enabling WPA3-SAE in Externally Authenticated Multi-PSK (ePSK / MPSK / DPSK / iPSK / PPSK) Deployments

Azif Abdul Salam Kolisam Beevi·Anil Kumar Reddy·Niraj Lochan Mahapatra
View original source ↗Read source document ↗Export metadata ↓

Abstract

Large multi-dwelling unit (MDU), student-housing and hospitality networks rarely store resident pre-shared keys (PSKs) on the access point (AP). Instead, the per-resident keys of ePSK, MPSK, DPSK, iPSK or PPSK services are held in an external RADIUS server or cloud database synchronised with the property-management system. Our earlier work, Companion-BSSID-Assisted PSK Discovery (CAPD), brought WPA3-SAE to multi-PSK networks by learning the client's PSK on a WPA2-only companion BSSID and steering the client with IEEE 802.11v to a hidden WPA2/WPA3 primary BSSID of the same SSID. CAPD assumes that the AP can test every PSK itself. This paper removes that assumption. We propose RADIUS-Assisted Companion PSK Discovery (RA-CAPD). The AP forwards the ANonce, the raw EAPOL-Key message 2 (SNonce, MIC, RSNE), the SSID, the client MAC, the BSSID and the AP MAC to the external server in RADIUS vendor-specific attributes (VSAs). The server validates the MIC against all provisioned keys, identifies the matching PSK, and returns it encrypted under the RADIUS shared secret (or a per-AP key for cloud databases), together with the unit, room or user identity and the VLAN. The AP binds the client to this PSK and identity, synchronises the binding across all APs in the domain, and moves the client to the configured profile: 802.11v-capable clients via a BSS Transition Management request, and other clients by disconnection and reconnection. On that profile, SAE-capable clients complete WPA3-SAE and WPA2-only clients complete WPA2-PSK, both with the learned key and no further search, so the companion BSSID serves only for onboarding. We present the design, attribute dictionary, algorithms, complexity and security properties, together with laboratory validation on commercial access points.

Explore related subjects

cs.NI

Keep this discovery

Explore connections, maps & timelines

BibTeXRIS

Azif Abdul Salam Kolisam Beevi, Anil Kumar Reddy, Niraj Lochan Mahapatra. 2026-10-10. RADIUS-Assisted Companion PSK Discovery: Enabling WPA3-SAE in Externally Authenticated Multi-PSK (ePSK / MPSK / DPSK / iPSK / PPSK) Deployments. https://arxiv.org/abs/2610.14410

Cite the original work for its findings. Save a collection to share your selection of sources.

KEEP EXPLORING

Related papers

arXiv2026

Joint User Association and Resource Allocation for Adaptive Semantic Communication in 5G and Beyond Networks

Semantic communication (SemCom) has emerged as a promising paradigm that leverages Deep Neural Networks (DNNs) to extract task-relevant information, thereby substantially reducing the volume of transmitted data. In existing implementations, the semantic transceiver is typically pre-trained for a specific task and uniformly adopted by all users. However, due to user heterogeneity in computational and communication capabilities, employing a single, fixed semantic transceiver may degrade the coding efficiency and transmission robustness. To address this issue, we first demonstrate the feasibility of dynamically adjusting the computational and communication overhead of DNN-based semantic transceivers, enabling a more flexible paradigm referred to as Adaptive Semantic Communication (ASC). Building on this concept, we formulate a joint user association and resource allocation problem for ASC in 5G and beyond networks, aiming to maximize overall system utility under energy and latency constraints. However, the problem is very challenging due to the inherent interdependencies among decision variables. To tackle this complexity, we decompose the original problem into three subproblems: (i) ASC scheme selection for each user, (ii) spectrum allocation at each Small-cell Base Station (SBS), and (iii) user association across SBSs. Each subproblem is solved sequentially based on the solutions of the preceding stages. The proposed algorithm efficiently yields near-optimal solutions with polynomial-time complexity. Simulation results demonstrate our approach outperforms existing baselines under various situations.

cs.NI↗
arXiv2026

LLM-Guided Dual-Stage Latency Optimization for Closed-Loop 6G V2I Digital Twins

Wireless Digital Twins are emerging as a key enabler for predictive network control in 6G Vehicle-to-Infrastructure (V2I) systems. However, closed-loop V2I DTs face two dual-stage communication bottlenecks arising from model parameter exchange for V2I DT reconstruction and multi-service V2I traffic delivery after each reconstruction. This paper proposes a closed-loop dual-stage End-to-End (E2E) latency optimization framework that integrates Compressed Personalized Federated Learning with a unified Large-Language-Model-guided Multi-Agent Reinforcement Learning approach. A CPFL-enabled decision-oriented V2I DT is first constructed by jointly predicting Path Loss (PL) and Quality-of-Experience (QoE)-oriented Key Performance Indicators (KPIs). Then the framework comprises two temporally coupled but latency-wise distinct optimization stages: Stage I minimizes the joint Uplink (UL) and Downlink (DL) E2E transmission latency of compressed shared backbone's parameters, and Stage II minimizes the service-aware E2E latency of multi-service V2I traffic. As the two stages share aligned agent roles and action space, we develop a unified Semantic-Aware Guidance-Enhanced Multi-Agent Proximal Policy Optimization framework, in which the LLM acts as a training-time semantic planner that provides high-level traffic splitting and power allocation guidance to reduce inefficient exploration, while the MARL agents execute feasible low-level actions. Simulation results demonstrate that the proposed framework enables efficient V2I DT reconstruction and significantly reduces both E2E latency for DT reconstruction and multi-service V2I traffic. The proposed SAGE-MAPPO supports cross-stage policy reuse by sequentially solving the two stages within each DT update cycle, which accelerates convergence relative to the existing baselines and facilitates timely DT updates in dynamic V2I scenarios.

cs.NI↗
arXiv2026

Federated Multiagent Soft Actor Critic for IRS Assisted Cognitive Radio Networks under Partial Observability

Intelligent reflecting surfaces (IRSs) can improve spectrum efficiency and interference control in cognitive radio networks (CRNs) by reconfiguring the propagation environment. This paper presents FMASAC, a federated multi-agent soft actor-critic framework for IRS-assisted CRNs under partial observability, in which distributed secondary users (SUs) jointly select their transmit power and the phase shifts of an assigned subset of IRS elements using only local observations. Primary user (PU) protection is incorporated through an interference-penalized reward, and SUs coordinate by periodically averaging model parameters at a federated server, without exchanging raw observations, channel state information, or replay data. We formulate the problem as a partially observable Markov decision process, specify the local learning and aggregation procedure, and characterize its per-round communication cost. Illustrative performance trends contrast FMASAC with centralized SAC, independent SAC, IRS-fixed multi-agent reinforcement learning, and a heuristic CRN strategy. We also outline the simulation-based evaluation and the open challenges, namely constraint handling, agent heterogeneity, and scalability, that are needed to validate the framework.

cs.NI↗