WAPI-based authentication method of wireless mesh network

Abstract

The invention provides a WAPI-based authentication method of a wireless mesh network. The method comprises the following steps: an identification and authentication server intensively identifies various nodes to realize centralized management, after an association process of a request node and a node which is accessed to the network is completed, the node which is accessed to the network sends authentication activation information to the request node, subsequent processes of certificate authentication and shared key establishment by a session key are started, the shared key is established between the request node and the node which is accessed to the network, thus organically combining WAPI with the wireless mesh network, and after the shared key is established by the request node and the node which is accessed to the network through a key agreement, a data communication process can be completed according to the shared key to realize safe communication process.

Description

technical field [0001] The invention relates to the field of mobile communication, in particular to an authentication method in a wireless mesh network. Background technique [0002] The increasing development of network communication technology provides convenience for people to freely obtain network resources. However, this way of freely obtaining network resources puts forward higher requirements for security. The lack of security guarantees will make illegal operations on the network It is easy to implement and thus affects the security of upper-layer communication content and affects the rights and interests of users. [0003] WAPI (Wide Authentication and Privacy Infrastructure) is a security architecture that realizes two-way authentication and confidentiality between communication nodes and network bearer nodes, and is suitable for mainstream network physical topologies. Various security flaws in the international standards of WLAN, and the security technical soluti...

AI Technical Summary

Problems solved by technology

[0008] Since the wireless mesh network is a distributed network without a central point, and its wireless access points are connected to each other through wireless, it is a loose connection relationship, and the client nodes generally have mobility. It is extremely vulnerable to interference and eavesdropping by other malicious nodes, which affects the security of network communication, making security one of the problems restricting the large-scale implementation of wireless mesh networks

[0009] Although the WAPI used in the wireless local area network has good security features, however, because the wireless local area network is connected to the wireless access point after the station, the wireless access point is directly connected to the authentication server through a wired method, and the security is implemented through WAPI. During authentication, the three-element authentication process between the site, the wireless access point and the authentication server is directly carried out, and the network architecture of the wireless mesh network is obviously much more complicated than that of the wireless LAN. It not only has the MAP of the access site, supports The gateway node MPP for mesh interconnection and intercommunication with the external network also has MP for mesh interconnection. In specific communication, one data transmission needs to pass through multiple different nodes, so the above-mentioned three-factor authentication process cannot be directly applied. It is impossible to directly transplant the WAPI applied to the wireless local area network into the wireless mesh network. If the WAPI can be applied to the wireless mesh network, the security problem of the wireless mesh network can be improved. Appearance of WAPI Applied to Wireless Mesh Network

Images