一种分布式无线局域网接入系统  

Distributed WLAN access system

作　　者：李安怀[1] 荆继武[1] 

机构地区：[1]中国科学院研究生院信息安全国家重点试验室,北京100049

出　　处：《计算机工程与设计》2007年第1期62-65,共4页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2003AA144050)

摘　　要：随着无线网络的普及,其安全性能也成为关注的焦点。现在无线局域网通常使用802.11b数据传输方式和802.1x无线认证方案,但是它们存在一些安全缺陷。针对现有无线网络的安全缺陷,提出了一种特定应用环境下的解决方案。该方案采用数字证书,实现请求者与认证者之间的双向认证;采用动态密钥产生方式和高级数据加密方法,在加强身份认证的同时提高通信数据的机密性和完整性保护。实际运行情况表明,该系统能有效抵抗多种攻击,安全性能好。With the rapid development of wireless networks, more and more attentions are paid on their security. At present almost all the wireless networks adopt the standard 802.1 lb and 802.1x, but unfortunately there are some security vulnerabilities. In order to deal with those vulnerabilities, a solution special for some certain environment is proposed. This solution uses certificates and adopts mutual authenticate between appliers and authenticators. Keys dynamically is produced and uses advanced encryption algorithm is adopted, such as AES. So this system can provide strong identification authentication as well as data confidentiality and integrity. According to opera- tional aspect, this system can resist kinds of attacks effectively and have better security.

关 键 词：无线局域网 接入认证 802.11b 802.1x 中间人攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]