基于改进EAP的无线局域网络安全身份认证的研究  

Research on secure identity authentication of WLAN based on improved EAP

作　　者：蒋月华 JIANG Yue-hua(Hefei Industrial School,Hefei 230011,China)

机构地区：[1]合肥工业学校,安徽合肥230011

出　　处：《电子设计工程》2020年第16期124-127,132,共5页Electronic Design Engineering

基　　金：国家科技专项(3571RC61137);安徽职业教育质量提升工程项目(【2016】861号)。

摘　　要：为了增强无线局域网络的安全性,文中利用改进EAP协议的方法提出一种适用于无线局域网的身份认证方案。通过分析无线局域网的安全隐患与传统EAP协议的认证原理,结合IEEE802.1X标准和EAP-SIM协议的流程,文中设计了基于改进EAP协议的EAP-TTLS混合认证协议,同时增加AT_CLIENT_CHECK属性,从而避免泄露用户的IMSI、TMSI和认证三元组信息。综合安全性测试分析结果表明,利用实际的网络抓包分析工具,所提出的EAP-TTLS混合认证协议能够有效避免用户IMSI信息的泄露。In order to enhance the security of wireless local area network,this paper proposes an identity authentication scheme for wireless local area network using the method of improving EAP protocol.By analyzing the security risks of WLAN and the authentication principle of traditional EAP protocol,and combining the process of IEEE802.1 x standard and EAP-SIM protocol,this paper proposes EAP-TTLS hybrid authentication protocol based on the improved EAP protocol,and adds at client check attribute,so as to avoid disclosing users’IMSI,TMSI and authentication triple information.The security analysis results show that the EAP-TTLS hybrid authentication protocol proposed in this paper can effectively avoid the leakage of IMSI information.

关 键 词：无线局域网 身份认证 EAP-SIM协议 TTLS-SIM协议 安卓 数据分析 

分 类 号：TN925[电子电信—通信与信息系统]