IEEE802.1x协议中EAP-TLS认证协议的安全性分析与改进  

Security Analysis and Improvement of EAP-TLS Authentication Protocol in IEEE802.1x

作　　者：何定养[1] 王玉柱[1] 郑贤路[1] 卢继明[2] 肖洋[1] 

机构地区：[1]后勤工程学院后勤信息工程系,重庆401311 [2]后勤工程学院军事建筑工程系,重庆401311

出　　处：《后勤工程学院学报》2011年第1期92-96,共5页Journal of Logistical Engineering University

摘　　要：基于IEEE802．1x协议的体系结构，分析了EAP-TLS认证协议的安全性，详细阐述了EAP—TLS认证协议遭受中间人攻击的过程和原因，并提出了相应的改进方案。通过对Disassociate帧和EAP—Success消息进行加密和数字签名来保证消息的保密性和真实性，从而解决了客户端无法对Disassociate帧和EAP—Success消息源的认证问题，可以有效地抵抗中间人攻击。Based on IEEE802. 1x protocol architecture, the security of EAP-TLS authentication protocol is analyzed, the process and reasons of the man-in-the-middle attack from which the EAP-TLS authentication protocol suffered are expatiated in detail, and a corresponding improved scheme is supplied. By encryption and digital signatures for Disassociate frame and EAP-Success, the confidentiality and authenticity of message are ensured, which can resolve the authentication problem that client can not validate the message origin of Disassociate frame and EAP-Success, and resist the man-in-the-middle attack effectively.

关 键 词：802.1x EAP-TLS 安全性分析 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]