基于802.11i的WLAN安全认证机制研究与实现  

Research and Implementation on Secure Authentication Mechanism of WLAN Based on 802.11i Protocol

作　　者：殷安生[1] 

机构地区：[1]南京邮电大学软件学院,江苏南京210003

出　　处：《计算机技术与发展》2010年第9期127-130,共4页Computer Technology and Development

基　　金：江苏省高技术研究计划项目(BK2007603)

摘　　要：WLAN标准IEEE802.11的安全机制存在严重的漏洞,论证了如何以最新的IEEE802.11i标准中的安全机制来改善WLAN的安全性。考虑安全性与效率,应侧重依靠认证机制来实施WLAN的安全防护,通过IEEE802.11i RSN中的安全措施来更新WLAN现有的安全体系。最后基于EAP-TLS认证机制,设计了一种WLAN安全认证系统模型,该模型改变了传统认证机制中的安全策略,使用四步握手以及增强的密钥颗粒度方法提高了认证过程的安全性,并给出了该安全认证系统相应认证模块的软件实现方案,同时对该认证系统的安全性和适用性进行了相关论证。IEEE 802.11 which has been issued today mostly proved ineffectiveness and insecurity in secure mechanism,present a secure mechanism of latest IEEE 802.11i to improve the security of WLAN.It should emphasize particularly on authentication to implement the safeguard of WLAN,upgrade secure system through RSN of IEEE 802.11i.Also propose a secure authentication system model for WLAN based on EAP-TLS authentication mechanism.The model has changed the traditional authentication mechanism in the security policy,using a four-step handshake,as well as particle size increased the key means to enhance the security of the certification process,gives software implementation scheme of corresponding authentication modules,proves the security and applicability of this authentication system.

关 键 词：无线局域网 802.11i协议 RSN 802.1x协议 EAP-TLS 密钥协商 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]