一种新的无线局域网认证机制  

Novel Authentication Scheme for WLAN

作　　者：张浩军[1] 祝跃飞[1] 

机构地区：[1]信息工程大学网络工程系

出　　处：《计算机工程》2006年第23期135-136,142,共3页Computer Engineering

基　　金：国家自然科学基金资助项目(90204015;60473021);河南省科技攻关基金资助项目(0524220044);河南工业大学科研基金资助项目(0401009;050215;050211)

摘　　要：分析了无线局域网的安全标准IEEE 802.11i和WAPI在安全与效率上存在的缺陷。提出了一种基于哈希链构造认证令牌,实现无线网络快速实体认证机制FWAI。与802.11i和WAPI比较,新机制使用较少的交互,无需数字签名,实现在“第一时间”对实体STA的认证,并高效产生会话密钥。新机制不仅能有效防范STA、AP、ASU的假冒、消息重放等攻击,还具有很强的抗击拒绝服务攻击的能力。Several shortcomings of two security standards in WLAN： IEEE 802.11i and WAPI are analyzed on efficiency and security. A fast/efficient authentication scheme for WLAN （FWAI） is proposed, which is based on tokens derived from Hash chains. Compared with 802.11 i and WAPI, the proposed scheme needs fewer messages to authenticate STA in the foremost time, as well as session keys are negotiated efficiently. The scheme canot only against personating STA, AP and AS and messages replay attacks, but also can against DoS attacks effectively.

关 键 词：无线局域网 WAPI 802.11i 认证 FWAI 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]