Abstract: IEEE 802.16-2004 wireless-MAN standard supports two types of network architecture, i.e., PMP and mesh. In this paper, we first introduce a more robust and efficient PMP mutual authentication SA (security association) mechanism, which removes the certificate transmission after the first authentication to reduce system cost.A multi-hop mutual authentication SA mechanism associated with hypo-optimal routing strategy in mesh is then proposed.These two mechanisms guarantee a degree of protection comparable to those defined in the 802.16 protocol, while provide forward security and immunity against attacks on intermediate nodes.The routing strategy attached to mesh SA mechanism makes it possible to transmit management information before establishment of the on-demand data routing to shorten the service flow creation delay.

Key words: multi-hop mutual authentication, IEEE 802.16, mesh, node, hypo-optimal routing