a mechanism to enable secure identification of roaming rights prior to authentication / association is provided . the mechanism may include using a roaming id , and may also include the use of wild cards and group ids to reduce the length of transmissions . the mechanism may further employ public key infrastructure and puzzles to further enhance security and reduce the risk of denial of service attacks .