Wireless local area network switching authentication method based on elliptical curve

Abstract

The present invention discloses a wireless local area network switching authentication method based on elliptic curve, and belongs to the filed of network switching authentication. The method comprises the following steps: initializing an authentication server, which includes establishing two prime number sets and one elliptic curve; initializing the access point and mobile station, which comprises calculating authentication server, establishing the common and private key pair by the base point of common and private key pair of broadcast access point and mobile station to the base point, the access point and mobile station according to the secret information transmitted by authentication server; and switching authentication, which comprises executing mutual authentication with target access point and common key of mobile station and establishing sharing key with an ECDH algorithm. The method of the invention can effectively defend all known wireless local area network attack comprising denial of service and domino effect attack, and furthermore effectively reducing the computing expenditure and transmission expenditure.

Description

technical field [0001] The invention relates to a switching authentication method in network communication, in particular to a wireless local area network switching authentication method based on an elliptic curve, which belongs to the field of network switching authentication. Background technique [0002] Handover between wireless access points is very important for WLAN mobile stations, and designing a secure low-latency handover authentication protocol is a challenge. [0003] When a mobile station is handed off from a current access point to a target access point, it needs to authenticate to and subsequently associate with the target access point. The IEEE802.11 basic agreement in 1997 defines two authentication schemes, namely: shared key authentication and open system authentication, but these two schemes cannot resist various attacks. The IEEE802.11f working group and the IETF Seamoby working group then developed a context transfer protocol for switching authenticat...

AI Technical Summary

Problems solved by technology

[0007] The third is the domino effect attack

[0008] Public-key authentication schemes have been used in wireless networks, but public-key-based schemes rely heavily on the distribution of public-key certificates, an operation that is particularly costly in wireless environments using authentication schemes designed based on trust authorization

When a mobile terminal roams from one trust authorization domain to another trust authorization domain, the trust authorization initialization process must be repeatedly established, so it cannot save any handover time, nor can it meet the requirements of handover authentication

Images