Network system and method for obtaining the public key certificate for WAPI

Abstract

The network system obtaining public key certificate for WAPI only adds a DCS to store public key certificates of all ASUs and IP address and port number in whole network. The method for obtaining the public key certificate is also simple. This invention makes it easy to build trustiness between STS and ASU, solves the certification difficulty for roaming user, and has wide application future.

Description

Technical field [0001] The present invention relates to a security technology of a wireless local area network, specifically, to a network system and method for obtaining a public key certificate for WAPI, and belongs to the field of wireless communication technology. Background technique [0002] With the rapid development of wireless local area networks, its security issues have attracted increasing attention. The international standard ISO IEC 8802-11 defines the open system and shared key two link authentication mechanisms and the wired enhanced equivalent privacy WEP (Wired Equivalency Privacy) security protocol to solve the security problem; however, security vulnerabilities still exist. In order to make up for the loopholes in the security protocol of ISO IEC 8802-11, China issued a series of national standards for wireless local area network GB 15629.11 / 1102 and GB 15629.11-2003 / XG1-2006 / 1101 / 1103 / 1104 in 2003 and 2006 respectively. . GB 15629.11 has overcome the shortcom...

AI Technical Summary

Problems solved by technology

[0005] (1) Acquisition and management of electronic certificates: WAPI wireless network uses an asymmetric encryption algorithm with two keys, that is, there are public key-public key and private key-private key; in the process of information exchange, A Party generates a pair of keys and transmits the public key to Party B. After obtaining the public key, Party B encrypts the information with the key and sends it to Party A; Party A decrypts the encrypted information with its own private key.

[0006] (2) User roaming in different places; when the user roams in different places, it needs to establish a trust relationship with the roaming authentication server ASU, so the user needs to hold the roaming ASU public key certificate, however, because the user's home authentication server HASU and roaming location The authentication server ASU lacks a mutual trust relationship between the two, so that the authentication of the user's identity cannot be completed, and the ASU public key certificate cannot be issued to the user.

Images