Interfaces & Key Flow EAP lower layer requests keying material from EAP layer EAP layer provides only requested keying material, throws the rest away “Stand alone” Authenticator EAP layer on authenticator receives MSK/EMSK from EAP method, calculates requested keying material, passes it down to lower layer “Pass-through” Authenticator EAP layer on authenticator receives request from lower layer, remotes it to the EAP layer on the EAP server which receives MSK/EMSK from the EAP method, calculates requested keying material, passes it back to EAP layer on authenticator Model: AAA provides an LPC/RPC interface between lower layer and EAP layer. |