一种基于Wi-Fi/WAPI的无线局域网可信接入方案  

A trusted access scheme for WLAN Based on Wi-Fi/WAPI

作　　者：韩颖铮[1] 邓国强[1] HAN Ying-zheng,DENG Guo-qiang(Network Engineering and Research Center,South China University of Technology,Guangzhou 510640,C h in a)

机构地区：[1]华南理工大学信息网络工程研究中心,广州510640

出　　处：《信息技术》2018年第4期50-52,57,共4页Information Technology

基　　金：发改委下一代互联网技术研发产业化和规模商用专项(CNGI-12-03-027);广东省省级科技计划项目(2015A030401027)

摘　　要：主流的无线局域网协议Wi-Fi存在较多安全问题,而安全协议WAPI则存在不易部署的问题。文中结合Wi-Fi的易用性和WAPI安全性,提出了一种基于Wi-Fi/WAPI的可信接入方案。方案首先构建一个相对安全的Wi-Fi网络,用于终端用户身份验证及证书下载;为增加安全性,对证书进行MAC绑定和有效时间设定;用户终端正确安装合法有效的WAPI证书后,再接入可信的WAPI网络进行安全通信。在真实的无线局域网环境中对提出的方案进行了部署,验证了方案的可行性和有效性。The popular wireless LAN protocol Wi-Fi has safety problem while security protocol WAPI is not easy to deploy. With the combination of Wi-Fi＇s ease of use and WAPI security,a trusted access scheme based on Wi-Fi/WAPI is proposed. Firstly a relatively secure Wi-Fi network is built for enduser authentication and certificate download; to increase the security of certificate MAC binding and effective time setting are used; after installing the valid WAPI certificate correctly,the end-user can access the trusted WAPI network for secure communication. In the real wireless LAN environment,the proposed scheme is deployed to verify its viability and effectiveness.

关 键 词：无线局域网 WI-FI WAPI 可信接入 安全通信 

分 类 号：TP393.1[自动化与计算机技术—计算机应用技术]