Authentication server, method and system for bidirectional authentication in mesh network

Abstract

The invention relates to a bi-directional certification method for a certification server and a mesh network and a system thereof, belonging to the communication technical field; the certification server comprises a trust degree distribution module, a node state detecting module, a trust degree lowering / deprivation module and a trust degree management module, wherein the trust degree distributionmodule is used to determinate the security level of the node according to the received information of the node which requires to be certificated, and generates the trust degree time stamp after successful certification, and time stamp is sent to the node which requires to be certificated together with the signature algorithm mark after the signature; the node state detecting module is used to detect if nodes are attacked; the trust degree lowering / deprivation module is used to receive the break information or lower / deprive the trust degree of the node which is attacked; the rust degree management module is sued to store the user identity information of nodes in the Mesh network, which is successfully certificated, and the trust degree, the signatures and time stamps which are approved by the AS. The invention realizes that all nodes in the mesh network can choose correlation nodes based on the trust degree; moreover, the invention also realizes the bi-directional certification by verifying the trust degree signatures fed back from the correlation nodes at one time.

Description

technical field

[0001] The invention relates to the field of communication technology, in particular to an authentication server and a method and system for two-way authentication in a mesh network. Background technique

[0002] Wireless Mesh (wireless mesh network) network is also called "multi-hop" network, which is a new wireless network technology completely different from traditional wireless network. In a traditional wireless network, a centralized AP (Access point, access point) must first be accessed to perform a wireless connection. In this way, even if two 802.11b nodes are next to each other, they must communicate through the access point. In a wireless Mesh network, any wireless device node can act as an AP or a router at the same time, each node can send and receive data, and can communicate directly with one or more peer nodes.

[0003] The wireless Mesh network is different from the traditional BSS (Basic Service Set) in the role division. In the BSS domain...

Images