There are 2 ways to implement WPA. One requires an Access point router, and devices can be deployed with pre-defined keywords. This is similar to the way WEP was deployed, and basically provides a higher level of protection. It still requires static passwords/authentication keys to be defined in advance and distributed manually, which may be difficult in M2M applications. The password and device ID are verified by the Access point or Router which provides access to the network.