Patent ID: 7236477

Claim:
A method for performing authenticated handover in a wireless local area network (WLAN) by a mobile station, comprising: while associated with a first access point: obtaining a fast handoff master key from an authentication server associated with the WLAN; calculating a pairwise master key and a pairwise master key identifier from the master key; obtaining a list of ANonce values and neighbor access point identifiers from the first access point, where each ANonce value is unique and associated with one neighbor access point; deciding to handover to a second access point, the second access point being a neighbor access point of the first access point; upon deciding to handover to the second access point, transmitting a reassociation request to the second access point, the reassociation request including the pairwise master key identifier and an SNonce value; receiving from the second access point a reassociation response including an indication that the second access point has acquired the pairwise master key; calculating a pairwise temporary key based on the pairwise master key, SNonce value, and ANonce value associated with the second access point on the list of ANonce values obtained from the first access point; installing the pairwise temporary key; and commencing service with the second access point using the pairwise temporary key.