20120229b wi-fi certified passpoint final

7/29/2019 20120229b Wi-Fi CERTIFIED Passpoint Final

1/13

Wi-Fi CERTIFIED Passpoint:A new program from the Wi-Fi Alliance

to enable seamless Wi-Fiaccess in hotspots

Wi-Fi Alliance

February 2012

The following document and the information contained herein regarding Wi-Fi Alliance programs and expected dates of launch aresubject to revision or removal at any time without notice. THIS DOCUMENT IS PROVIDED ON AN "AS IS", "AS AVAILABLE" AND"WITH ALL FAULTS" BASIS. THE WI-FI ALLIANCE MAKES NO REPRESENTATIONS, WARRANTIES, CONDITIONS ORGUARANTEES AS TO THE USEFULNESS, QUALITY, SUITABILITY, TRUTH, ACCURACY OR COMPLETENESS OF THISDOCUMENT AND THE INFORMATION CONTAINED IN THIS DOCUMENT.


2/13

2 of 13

2012 Wi-Fi Alliance. All rights reserved.

Executive summary

Once found only in coffee shops and hotels, the public Wi-Fi hotspot has become ubiquitous around theworld. Growth of Wi-Fi in public spaces is expected to continue at a very strong pace, with InformaTelecoms & Media predicting 5.8 million hotspots worldwide in 2015.

The explosive growth is driven by several factors:Ubiquity of Wi-Fi in mobile devices like laptops, tablets and smartphones.

End-user appetite for Wi-Fi connectivity over 3G and 4G for mobile devices.

Widening support by service providers of Wi-Fi hotspots as a means to offload traffic from congestednetworks and to improve the end-user experience.

The forthcoming Wi-Fi CERTIFIED Passpoint program is the latest initiative from the Wi-Fi Alliance torevolutionize the end-user experience in Wi-Fi hotspots. Moreover, it is a key enabler for operator dataoffload in public hotspots. The specification underlying Passpoint certification defines a number offeatures, which will be introduced over the next 12 months:

Phase one features (planned for mid-2012):

Network discovery and selection: Devices identify and associate with Passpoint networks in thebackground, without any active intervention from the subscriber.

Seamless network access: Authentication no longer requires a browser-based sign-on or thesubscriber to enter a password. Devices are authenticated automatically, using ExtensibleAuthentication Protocols (EAP)based on a Subscriber Identity Module (SIM), a username andpassword, or certificate credentials.

Secure authentication and connectivity: All connections are secured with WPA2-Enterprise,which provides a level of security comparable to that of cellular networks.

Phase two features (planned for 2013):

Immediate account provisioning: Streamlined process to establish a new user account at the pointof access, driving a common provisioning methodology across vendors.

Operator policy: Mechanisms to support operator-specific subscriber policies, including networkselection policy.


3/13

3 of 13


Introduction

Overthe years, Wi-Fi coverage has extended to offer connectivity to end users in new environments andon a widening array of client devices. Public access in hotspots, where the Wi-Fi infrastructure is sharedamong all users who want to connect to the network, either for free or after paying a fee, is nowprominent around the world, from an increasing number of mobile devices with Wi-Fi.

The number of Wi-Fi hotspots has rapidly expanded over the last decade, growing from the initial creationof small, independent networks, which often covered only a single coffee shop or hotel, to larger, serviceproviderowned networks designed to provide wireless access in high-traffic public locations. As Wi-Ficonnectivity in public hotspots has grown in availability and popularity, delivering seamless andtransparent access across networks, with secure connections and uninterrupted service, has becomecrucial for providers to add value to their service offerings and enhance the end-user experience.

The Wi-Fi Alliance is developing the Wi-Fi CERTIFIED Passpoint program to provide an industry-wide,interoperable platform to streamline Wi-Fi access in public hotspots. Passpoint will be supported across awide range of networks and client devices, provide an improved end-user experience, and become an

important building block for service provider offload of data traffic and inter-provider roaming agreements.

Ahead of Passpoints expected initial launch in mid-2012, this paper provides an introduction to theprogram and the features it supports, the market requirements it meets, and the benefits it provides endusers and service providers.

Table of Contents

Executive summary .......................................................................................................................... 2

Introduction ...................................................................................................................................... 3

Wi-Fi devices and hotspots continue an upward trajectory ............................................................. 4

Insatiable demand for data: A challenge and an opportunity .......................................................... 4

Wi-Fi CERTIFIED Passpoint: Seamless Wi-Fi access in public hotspots ....................................... 6

Wi-Fi CERTIFIED Passpoint value proposition ............................................................................... 6

EAP Authentication enables seamless access ................................................................................ 7

Passpoint security with WPA2-Enterprise ....................................................................................... 9

Roaming access through advanced network selection functionality ............................................... 9

Support for legacy networks and client devices ............................................................................. 10

Timeline for the Passpoint program ............................................................................................... 10

Summary ........................................................................................................................................ 11

Further information resources ........................................................................................................ 11

About the Wi-Fi Alliance ................................................................................................................. 12

Appendix: Wi-Fi Alliance initiatives to promote seamless connectivity .......................................... 12


4/13

4 of 13


Wi-Fi devices and hotspotscontinue an upward trajectory

With more and more Wi-Fi devicesentering the market, data usage overWi-Fi accounts for an increasing portion of

the total network access, from 36 percentin 2010 to 46 percent in 2015 (Figure 1).As Wi-Fi integrated circuit (IC) sales andWi-Fi product certification volumescontinue to increase (Figure 2), thefastest-growing categories in the Wi-Fimarket have been mobile and consumerelectronic (CE) devices.

Consumers are accustomed to usingWi-Fi when on the go. According to

comScore1, more than 37 percent of

mobile phone traffic and more than 90

percent of tablet traffic is alreadytransported over Wi-Fi in the US. Therapid increase in popularity of personalwireless routers that provide shared Wi-Fiaccess to multiple end-user devices isfurther encouraging the use of Wi-Fi.

With users demanding ubiquitous networkaccess, the number of Wi-Fi hotspots innonresidential settings is expected togrow rapidly over the next four years(Figure 3) as service providers intensifytheir efforts to meet that demand and toencourage Wi-Fi usage to ease

congestion on cellular networks.

Insatiable demand for data: Achallenge and an opportunity

Wi-Fi has become a crucial complementto cellular networks, as subscriber volumeand per-subscriber traffic load grow fasterthan the available cellular capacity.Global mobile data traffic is predicted toreach 17 terabytes annually by 2014(Figure 4).

1comScore, Digital Omnivores: How Tablets, Smartphones and Connected DevicesAre Changing U.S. Digital Media

Consumption Habits, 2011.

Figure 1. Wired, Wi-Fi and mobile traffic volume in 2010 and2015. Source: Cisco Visual Networking Index (VNI), www.cisco.com.

Figure 2. Wi-Fi integrated circuit (IC) shipments by device type inmillions and Wi-Fi product certifications. Source: ABI Research andWi-Fi Alliance.


5/13

5 of 13


A variety of service providers are integrating Wi-Fi into their core offering, driving an explosion in thenumber of hotspots and the data volumes they transport:

Mobile operators. Wi-Fi hotspots improve the subscriberexperience and allow operators to offload data from their

congested cellular networks. As one example, in the UnitedStates, AT&T now provides Wi-Fi access to its subscribers inabout 30,000 hotspots. The AT&T Wi-Fi network supported487 million connections during the fourth quarter of 2011more than triple the number from the previous year, with avolume of traffic that nearly tripled over the same period.

2

Wireline broadband service providers, including cable andother fixed-line operators. With growing public Wi-Fiofferings, these providers can differentiate their service fromthe competition and offer a more compelling serviceproposition to their subscribers outside of the home. Theseproviders may also wholesale Wi-Fi access to roamingpartners.

Pure-play hotspot service providers offering access inpartnership with hotels, restaurants, transportation authorities, and retailers. Customershave come to expect Wi-Fi access in a wide range of public locations. Wi-Fi has become a tool toattract and retain customers, or to encourage purchases of goods or services. Wholesaleofferings to mobile providers who seek to expand their Wi-Fi offerings can also augmentrevenues for these providers.

Thanks to the ubiquity of Wi-Fi inresidential and workplaceenvironments, users have quicklylearned to use Wi-Fi accesseverywhere they go. They expect

a Wi-Fi service that is astransparent, consistent,automatic, and secure as theircellular service, and that worksacross all the Wi-Fi devices theyown.

2. AT&T, 1.2 Billion Customer Connections Made to 30,000 AT&T Wi-Fi Hot Spots in 2011, 2012.

Figure 3. Number of public hotspotsworldwide. Source: Wireless Broadband

Alliance (WBA) and Informa Telecoms &Media.

Figure 4. Global mobile data traffic. Source: WBA and Informa Telecoms &Media.


6/13

6 of 13


Wi-Fi CERTIFIED Passpoint:Revolutionizing the user experience inhotspots

Wi-Fi CERTIFIED Passpoint is being developed toaddress service provider requirements for seamless

Wi-Fi access in public hotspots, and to givesubscribers the user experience they desire andexpect.

In home and workplace environments, connecting toa Wi-Fi network is usually automatic for end users,once they have provided the authenticationcredential during the first network association.Network selection and association after that areinitiated on the client device side, and they aresubject to the policies set forth by the IT manager orto the homeowners preference. As users continue toaccess the same networks, the client devicesautomatically associate with known and trustednetworks, without requiring further user intervention.

Today, connecting in most hotspot environments isquite different from the model described above. In apublic hotspot, subscribers typically have to searchfor and choose a network, request and acknowledgethe connection to the access point (AP) each time,and in some cases, must re-enter theirauthentication credentials. Existing solutions thatsimplify network selection and association andprovide security are proprietary, limitinginteroperability and worldwide usage.

The emergence of Wi-Fi CERTIFIED Passpoint will

transform the user experience in public hotspots. Asan industry-wide solution, Passpoint will work in anynetwork and overcome the limitations of proprietary,non-interoperable solutions offered by some providers today. Devices certified in the program willmanage network association, authentication, sign-up, and security in the background, in a way that iscompletely transparent to the subscriber and that consistently works in any Passpoint network.

Wi-Fi CERTIFIED Passpoint value proposition

With the active support from a wide ecosystem of device manufacturers, mobile operators, and serviceproviders, the Passpoint certification program was designed to provide a higher-quality experience forsubscribers in hotspots, and an effective platform for service providers to offload traffic to Wi-Fi networks

and offer new Wi-Fibased services. The features of Passpoint are described in

Phase one features of the Wi-Fi CERTIFIED Passpoint program (mid-2012)

Network discoveryand selection

Client devices discover and automatically choose networks based on userpreferences, provisioned operator policy, and network availability. Thesefeatures are based on the recent IEEE 802.11u amendment.

Liaison with the Wireless BroadbandAlliance (WBA) to deliver a

harmonized hotspot platform

The Wi-Fi Alliance has created a Liaison Agreementwith WBA. The agreement enables the organizations toshare information, and collaborate to harmonize eachgroups programs. The Wi-Fi Alliance will certifyequipment under the Wi-Fi CERTIFIED Passpointprogram to help ensure interoperability.

WBA programs facilitate roaming agreements andtechnical relationships between operators under theNext Generation Hotspot (NGH) guidelines. NGHguidelines assume Wi-Fi CERTIFIED Passpointcapabilities in deployed hotspot equipment and clientdevices.

____________________________________________

Improving customer experience is the main driver forthe adoption of Passpoint for mobile operators. Theywant to replicate the cellular network experience thattheir subscribers have with their phones when they useWi-Fi, so their users go to a hotspot and it just works no need to do anything. This will allow hotspots toprovide a more reliable and user-friendly service. SIM-based authentication is crucial for mobile operators toenable seamless connectivity, as well as enhancesecurity at Wi-Fi hotspots.

Nigel Bird, Project Leader,WBA Next Generation Hotspot Operator Guidelines


7/13

7 of 13


Seamless networkaccess

Wi-Fi hotspot access for in-network APs no longer requires an activeselection or input from the subscriber. Passpoint uses a consistentinterface and automated association process.

Devices can be automatically granted access to the network based onmultiple credential types. Passpoint supports Subscriber Identity Module

(SIM)based authentication, widely used in cellular networks today, aswell as username/password combinations and certificate credentials. Noend-user intervention is required in order to establish a connection to atrusted network.

WPA2-Enterprisesecurity

All Passpoint connections are secured with WPA2-Enterprise forauthentication and connectivity, offering a level of security comparable tothat of cellular networks. Passpoint enhances WPA2-Enterprise by addingfeatures to mitigate common attack vectors in public Wi-Fi deployments.

Phase two features of the Wi-Fi CERTIFIED Passpoint program (2013)

Immediate account

provisioning

Standardized and streamlined process for establishing a new user

account at the point of access, driving a common provisioningmethodology across vendors.

Operator policy Mechanisms to support operator-specific subscriber policies, includingnetwork selection policy.

.

Phase one features of the Wi-Fi CERTIFIED Passpoint program (mid-2012)

Network discoveryand selection

Client devices discover and automatically choose networks based on userpreferences, provisioned operator policy, and network availability. Thesefeatures are based on the recent IEEE 802.11u amendment.

Seamless networkaccess

Wi-Fi hotspot access for in-network APs no longer requires an activeselection or input from the subscriber. Passpoint uses a consistentinterface and automated association process.

Devices can be automatically granted access to the network based onmultiple credential types. Passpoint supports Subscriber Identity Module(SIM)based authentication, widely used in cellular networks today, aswell as username/password combinations and certificate credentials. Noend-user intervention is required in order to establish a connection to atrusted network.

WPA2-Enterprisesecurity

All Passpoint connections are secured with WPA2-Enterprise forauthentication and connectivity, offering a level of security comparable tothat of cellular networks. Passpoint enhances WPA2-Enterprise by addingfeatures to mitigate common attack vectors in public Wi-Fi deployments.


8/13

8 of 13


Phase two features of the Wi-Fi CERTIFIED Passpoint program (2013)

Immediate accountprovisioning

Standardized and streamlined process for establishing a new useraccount at the point of access, driving a common provisioningmethodology across vendors.

Operator policy Mechanisms to support operator-specific subscriber policies, includingnetwork selection policy.

Users of Wi-Fi CERTIFIED Passpoint devices will notice significant changes in the way they connect tohotspots. The commonly used browser-based authentication that requires users to enter their accountinformation on a captive portal will no longer be necessary, as the client device can authenticate withoutinput from the end user. Not only does browser-based authentication require an active effort fromsubscribers, it does not work in devices without a browser (e.g., a feature phone) or in devices configuredto automatically connect to some virtual private networks (VPNs).

EAP Authentication enables seamless access

Passpoint creates a global platform centered on four standards-based Extensible AuthenticationProtocols (EAPs) that are commonly deployed in the industry today (

EAP method Credential type

EAP-Transport Layer Security (EAP-TLS) Client- and server-side, with a trusted rootcertificate

EAP-SIM SIM, if mobile device has SIM credential

EAP-Authentication and Key Agreement(EAP-AKA)

Universal Subscriber Identity Module (USIM),if mobile device has USIM credential

EAP-Tunneled Transport Layer Security(TTLS) with Microsoft Challenge-HandshakeAuthentication Protocol Version 2(MSCHAPv2)

Username and password, with server-sidecertificates

). The EAP-SIM and EAP-AKA SIM-based authentication methods enable mobile operators to use thesame credential for both cellular and Wi-Fi authentication.

EAP method Credential type

EAP-Transport Layer Security (EAP-TLS) Client- and server-side, with a trusted rootcertificate

Table 1. Features of the Wi-Fi CERTIFIED Passpoint program.


9/13

9 of 13


EAP-SIM SIM, if mobile device has SIM credential

EAP-Authentication and Key Agreement(EAP-AKA)

Universal Subscriber Identity Module (USIM),if mobile device has USIM credential

EAP-Tunneled Transport Layer Security(TTLS) with Microsoft Challenge-HandshakeAuthentication Protocol Version 2(MSCHAPv2)

Username and password, with server-sidecertificates

In addition to ease of use, Passpoint seamless authentication brings these benefits to service providersand users:

Hotspot access for CE devices without a browser. Passpoint authentication methods do notrequire a browser, and will facilitate the use of CE devices like cameras or embedded devices in

cars that do not have a browser.

New sign-up and content delivery models. The increased flexibility in provisioning newaccounts and tying them to complementary accounts (e.g., a cable modem subscription) andservices (e.g., location-based services to reward customers for a purchase) will further encouragethe emergence of new sign-up and content delivery models. Keeping the authentication processin the background and securing the connection will make hotspot access much more attractive tocontent providers and manufacturers of content-oriented devices such as digital book readers.Occasional Wi-Fi access can also be simplified for subscribers who do not have a prepaidsubscription for instance, using charging models similar to prepaid plans from mobile operators.

Enable digital-rights management over Wi-Fi. Service providers increasingly provide protectedand paid content to their subscribers, but to do so they need to know who receives the content.Passpoint background authentication enables service providers to verify the identity and access

rights of subscribers, and to deliver premium content to subscribers connected to home andworkplace networks, as well as public hotspots.

Table 2. EAP methods supported by Passpoint.


10/13

10 of 13


Wi-Fi security with WPA2-Enterprise

In all Passpoint connections, WPA2-Enterprise is required for certification because it provides aconsistent security level that both service providers and subscribers can rely on to protect the network,the devices, and the transmitted data.

WPA2-Enterprise meets enterprise and government security requirements. It leverages Authentication,

Authorization, Accounting (AAA) functionality to monitor and manage traffic, and to define user-specificauthentication levels, using multiple EAP methods for authentication

3.

WPA2-Enterprise certification is widely available in Wi-Fi CERTIFIED mobile devices and laptops. Legacyclients that are certified for WPA2-Enteprise support the same level of security as the new Passpointequipment, and can use the new Passpoint authentication process if they have WPA2-Enterpriseenabled.

Roaming access through advanced network selection functionality

Passpoint hotspots enable service providers to offer seamless roaming in one anothers hotspotnetworks. To enable roaming, service operators have to first establish mutual roaming agreements that

cover credential validation, billing, and reconciliation, and which rely on a single common protocol fornetwork selection and user authentication in hotspots. Wi-Fi CERTIFIED Passpoint provides thatfoundational protocol.

3WPA2-Enterprise uses an authentication and key management infrastructure that differs from WPA2-Personal. WPA2-

Personal support is mandated in all Wi-Fi equipment and provides security in residential and small business environmentswithout AAA capabilities. Devices that support only WPA2-Personal do not benefit from Passpoints new security features, butwill still be able to connect to Passpoint networks.

Broad industry support for Wi-Fi CERTIFIED Passpoint

Cisco is dedicated to supporting open standards across all of our innovative Wi-Fi technologies.By supporting the Wi-Fi Alliance Passpoint certification, service providers can more easilyoptimize their networks by offloading data traffic to Wi-Fi and help deliver a better mobileexperience to their end customers.

Sujai Hajela, Vice President and General Manager, Wireless Networking Business Unit, Cisco

By developing carrier-grade certification, this new generation of hotspots will allow Orange toprovide Wi-Fi services that are both reliable and user-friendly. In addition, SIM-basedauthentication will enhance security and accessibility to Orange Wi-Fi hotspots, especially whenroaming.

Rida Zouaoui, Head of Access Networks Standardisation, France Telecom-Orange

We are proud to participate in the Wi-Fi Alliance hotspot certification initiative. The program willprovide users with a simpler and more standardized way to discover, subscribe, and securelyconnect to hotspots around the world than is possible today.

Andrew Bocking, VP, Handheld Software Product Management, Research In Motion


11/13

11 of 13


Once roaming between two service providers is enabled, Passpoint devices can connect to either anetwork provided by the subscribers service provider, or to a visited network provided by anotherprovider, using the same process. In all cases, the Passpoint client recognizes the AP as belonging to thelist of available networks and establishes a connection. The end users experience is similar to cellularroaming as they reach a Passpoint hotspot, the device connects automatically.

Support for legacy networks and client devices

The new functionality is enabled only when both the AP and the client device are certified for Passpoint.However, the Passpoint certification program supports connectivity for legacy equipment:

Legacy client, Passpoint AP. Legacy clients with the correct credentials and supporting thecorrect EAP methods can connect to Passpoint APs. Legacy clients which do not have thecorrect credentials and support for the correct EAP methods must use open-system, browser-based authentication, where WPA2 may not be required and therefore security is not guaranteed.

Legacy AP, Passpoint client. Passpoint clients can connect to any legacy Wi-Fi network.However, when connected to a legacy network, they will not be able to use Passpoint featuresand services, and there is no requirement for WPA2 to be enabled.

Timeline for the Passpoint program

Wi-Fi CERTIFIED Passpoint is a forthcoming certification program from the Wi-Fi Alliance that targetsboth access points and client devices. In addition, Passpoint provides the specifications for online sign-upand for operator policy, and guidelines for the recommended best practices for hotspot access.

The Passpoint Technical Task Group has successfully completed initial testing and is now in the processof finalizing the specification, best-practice recommendations, and test plan. The launch of certificationtesting is planned for July 2012, with an additional set of features added in early 2013 (Table 1). Theadditional phase 2 program features will become a mandatory component of Passpoint certification.


12/13

12 of 13


Summary

Wi-Fi hotspots enable service providers to enhance subscriber experience and to relieve congestion intheir networks (Figure 5). End users own an increasing number of Wi-Fienabled devices, and hotspotsprovide users a cost-effective way to get a reliable and affordable connection in high-traffic locations.Vendors benefit from a widening market for Wi-Fi mobile devices that is increasingly moving beyond

laptops and smartphones, to include tablets, digital book readers, game consoles and other CE devices.Wi-Fi CERTIFIED Passpoint is the new certification program developed by the Wi-Fi Alliance in closecollaboration with service providers and equipment vendors to make hotspot access seamless, effortlessand secure for subscribers. Passpoint empowers service providers to fully leverage Wi-Fi ubiquity in theclient devices, and to offer a more compelling service to their subscribers and customers.

Further information resources

An up-to-date list of certified products can be found in the Wi-FiCERTIFIED products database on the Wi-Fi Alliance website (www.wi-fi.org), where users can search for Wi-Fi CERTIFIED equipment bymultiple criteria, including product category, manufacturer, certificationdate and features supported, and can view the interoperability

certificate for certified products.

For further information on the Wi-Fi Alliance certification program andfor white papers on Wi-Firelated topics, please visit the KnowledgeCenter on the Wi-Fi Alliance website (www.wi-fi.org).

Figure 5. The benefits of Passpoint to service providers, end users, and equipment vendors.

The Wi-Fi CERTIFIED logomakes it easy to identify trusted

Wi-Fi products
http://www.wi-fi.org/http://www.wi-fi.org/http://www.wi-fi.org/http://www.wi-fi.org/http://e/Documents/SenzaFili/Projects/WFA_China/www.wi-fi.orghttp://e/Documents/SenzaFili/Projects/WFA_China/www.wi-fi.orghttp://e/Documents/SenzaFili/Projects/WFA_China/www.wi-fi.orghttp://e/Documents/SenzaFili/Projects/WFA_China/www.wi-fi.orghttp://www.wi-fi.org/http://www.wi-fi.org/


13/13

13 of 13


About the Wi-Fi Alliance

The Wi-Fi Alliance is a global nonprofit industry association of hundreds of leading companies devoted toseamless connectivity. With technology development, market building, and regulatory programs, the Wi-FiAlliance has enabled widespread adoption of Wi-Fi worldwide.

The Wi-Fi CERTIFIED program was launched in March 2000. It provides a widely recognized

designation of interoperability and quality, and it helps to ensure that Wi-Fi-enabled products deliver thebest user experience. The Wi-Fi Alliance has completed more than 13,000 product certifications,encouraging the expanded use of Wi-Fi products and services in new and established markets.

Wi-Fi, Wi-Fi Alliance

, WMM

, Wi-Fi Protected Access

(WPA), the Wi-Fi CERTIFIED logo, the Wi-Fi

logo, the Wi-Fi ZONE logo and the Wi-Fi Protected Setup logo are registered trademarks of the Wi-FiAlliance. Wi-Fi CERTIFIED, Wi-Fi Direct, Wi-Fi Protected Setup, W i-Fi Multimedia, WPA2,Passpoint, and the Wi-Fi Alliance logo are trademarks of the Wi-Fi Alliance.

Appendix: Wi-Fi Alliance programs to promote seamless connectivity

From its inception, the Wi-Fi Alliance has promoted interoperability across vendors through its Wi-FiCERTIFIED

TMprogram that certifies client devices and infrastructure equipment that meets the

specifications and the performance requirements established by the Wi-Fi Alliance, and based on theIEEE 802.11 standard. Users confidence that Wi-Fi CERTIFIED devices can connect to any Wi-FiCERTIFIED APs to deliver a reliable connection and a high-quality experience has made Wi-Fiubiquitous in PCs, laptops, tablets and smartphones, and increasingly available in other CE devices.

With effortless interoperability as its core target, the Wi-Fi Alliance certification program has expandedto include the building blocks that support a richer and safer user experience with mobile devices:

Wi-Fi Protected Access 2 (WPA2) is required in all Wi-Fi CERTIFIED devices and

infrastructure equipment and provides IEEE 802.1X controlled access, secure EAP-basedauthentication and connectivity through encryption of the over-the-air traffic.

WPA2 with Protected Management Frames (PMF) provides a WPA2-level of protection forunicast and multicast management action frames, strengthening privacy protection for data frameswith mechanisms that improve the resiliency of mission-critical networks.

Wi-Fi MultimediaTM

(WMM

) provides quality of service (QoS) functionality to enhance the userexperience with real-time applications, such as streaming video and voice applications.

Wi-Fi MultimediaTM

Power Save (WMM

-PS) minimizes power consumption in mobile devices.

Wi-Fi CERTIFIED n leverages multiple-in, multiple-out (MIMO) technology in IEEE 802.11nWi-Fi CERTIFIED products to enhance performance and capacity in Wi-Fi networks.