Network system and method for obtaining the public key certificate for WAPI

Abstract

The network system obtaining public key certificate for WAPI only adds a DCS to store public key certificates of all ASUs and IP address and port number in whole network. The method for obtaining the public key certificate is also simple. This invention makes it easy to build trustiness between STS and ASU, solves the certification difficulty for roaming user, and has wide application future.

Description

technical field [0001] The invention relates to a security technology of a wireless local area network, specifically to a network system and method for obtaining a public key certificate for WAPI, and belongs to the technical field of wireless communication. Background technique [0002] With the rapid development of WLAN, its security issues are increasingly concerned by people. The international standard ISO IEC 8802-11 defines open system and shared key two link authentication mechanisms and wired equivalent privacy WEP (Wired Equivalency Privacy) security protocol to solve security problems; however, security loopholes still exist. In order to make up for the loopholes in the security protocol in ISO IEC 8802-11, China issued a series of national standards for wireless LAN GB 15629.11 / 1102 and GB 15629.11-2003 / XG1-2006 / 1101 / 1103 / 1104 in 2003 and 2006 respectively . GB 15629.11 overcomes the shortcomings of traditional security solutions. These standards are a security...

AI Technical Summary

Problems solved by technology

[0005] (1) Acquisition and management of electronic certificates: WAPI wireless network uses an asymmetric encryption algorithm with two keys, that is, there are public key-public key and private key-private key; in the process of information exchange, A Party generates a pair of keys and transmits the public key to Party B. After obtaining the public key, Party B encrypts the information with the key and sends it to Party A; Party A decrypts the encrypted information with its own private key.

[0006] (2) User roaming in different places; when the user roams in different places, it needs to establish a trust relationship with the roaming authentication server ASU, so the user needs to hold the roaming ASU public key certificate, however, because the user's home authentication server HASU and roaming location The authentication server ASU lacks a mutual trust relationship between the two, so that the authentication of the user's identity cannot be completed, and the ASU public key certificate cannot be issued to the user.

Images