一种适用于IBSS网络的无线接入认证协议  

A Wireless Access Authentication Protocol Suitable for IBSS Networks

作　　者：铁满霞[1] 李建东[1] 张变玲[1] 黄振海[1] 

机构地区：[1]西安电子科技大学通信工程学院

出　　处：《电子与信息学报》2008年第1期6-9,共4页Journal of Electronics & Information Technology

基　　金：国家自然科学基金;微软亚洲研究院联合项目(60372048);中科院研究生院信息安全国家重点实验室开放课题资助课题

摘　　要：针对目前无线局域网接入认证协议WAPI与RSNA在IBSS模式下运行复杂及密钥管理协议存在DoS攻击等问题,该文采用实体认证角色的自适应选择策略,对密钥管理协议进行改进,提出了一种安全性更强、执行效率更高的适用于IBSS网络的无线接入认证协议,并利用CK模型对其进行了分析。分析结果表明:在密钥加密算法是CCA安全及密钥导出算法是伪随机的前提下,协议在UM下是SK-secure的。最后,以WAPI协议为例,给出新协议与原始协议的性能对比。It is relatively complex for the existing protocols of WAPI and RSNA of WLAN to run in IBSS networks. There are DoS attacks in their key management procedures. In order to resolve these problems, adopting adaptive selection of entity authentication role and redesigning a new key management protocol, a new wireless access authentication protocol more robust, more efficient and more suitable for IBSS networks is presented. With Canetti-Krawczyk model, this new protocol is analyzed in detail. The analysis results show that it is SK-secure in UM if key encryption algorithm is CCA-secure and the key derivation function is pseudo-random. Finally, based on WAPI, the performance comparison between the new protocol and its original one is made.

关 键 词：无线局域网 IBSS 认证协议 Canetti-Krawczyk 模型 安全分析 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]