Access authentication method of wireless mesh network

Abstract

A wireless meshed network access authentication method belongs to the computer network field. When the system is initializing, offline CA gives a public-private key pair respectively to the system and itself; user provides user basic information to the offline CA to register for obtaining a public-private key pair and a public key certificate before accessing the network; if user want to serve as a backbone or an area router, it further need to provide an application; the offline CA selects users with better performances to serve as backbone and area router; the backbone router manages the system public-private key pair according to (n, t) threshold system, and gives authorization certificates and identity-based private keys to users. if a user want to enter some area, it provides the authorization certificate to the area router of the area, verifying with the area router to each other by the authorization certificates, and negotiating the authorization secret key of itself using three-sides agreement algorithm in order to access the area network. The method can effectively prevent unauthorized user from entering into network, and enable the authorized user to be quickly authenticated to acquire the resource service in network.

Description

technical field [0001] The invention relates to a wireless Mesh authentication method, which can be applied to the access authentication of the wireless Mesh network user and the fast authentication when the user roams between different areas, and belongs to the field of computer networks. Background technique [0002] Wireless Mesh network is a new type of wireless network technology completely different from traditional wireless network, because wireless Mesh network is expected to overcome some limitations of Ad Hoc network, wireless local area network, wireless personal area network, wireless metropolitan area network, and can improve its performance And provide a fast, simple and cheap network distribution system, so it is increasingly becoming the first choice for wireless Internet service providers to build network connections. Since the mobile user needs to re-authenticate when accessing the wireless Mesh network and roaming, this process not only requires a small au...

AI Technical Summary

Problems solved by technology

However, the operation of EMSA relies on the key holder MKD (Mesh keydistributors). The introduction of MKD breaks the equality between devices in the Mesh network and directly threatens the confidentiality of user data.

Recently, a security mechanism based on EAP-TLS has been proposed. Although EAP-TLS has good security, such as mutual authentication and robustness against malicious attacks, asymmetric encryption requires a large amount of calculation, and Not suitable for light WMN networks, and the need to establish and manage PKI also brings great complexity

Images