Terminal and security association establishment method under ad hoc network mode and

Abstract

The invention provides an ad hoc network mode security association establishment method which is applied to a requester terminal and an authenticator terminal containing a self-signed certification authority. The method comprises the following steps: the requester terminal obtains a self-signed certificate issued by the self-signed certification authority from the authenticator terminal through an open system link established between the requester terminal and the authenticator and the preset name and password of a user; and the requester terminal uses the self-signed certificate to establish security association with the authenticator terminal. The invention further provides a terminal containing a self-signed certification authority. The invention does not need two rounds of five-time handshake processes to negotiate two groups of unicast keys and multicast keys, reduces the handshake processes of establishing security association, accelerates the security association establishment speed and reduces the terminal power consumption.

Description

technical field [0001] The invention relates to the field of wireless local area network communication, and mainly relates to a method for establishing a security association in an ad hoc network mode under WAPI security and a terminal. Background technique [0002] Compared with wired network, packet communication on WLAN is more vulnerable to eavesdropping and attacks. IEEE originally used Wire Equivalent Privacy (WEP) to protect the security of wireless LAN. Since WEP uses a static key, the same key is used for each connection and the key length is too short, so it is easy to be cracked. Thus endangering the security of network communication. When formulating the national standard of WLAN, WEP is replaced by Wireless LAN Authentication and Privacy Infrastructure (WAPI), which greatly enhances the security of WLAN. [0003] WAPI uses public key facilities such as elliptic curve encryption system, Elliptic Curve Diffie-Hellman key exchange system (ECDH, Elliptic Curve Dif...

AI Technical Summary

Problems solved by technology

This method is mainly to verify the certificate provided by the third party, but it adds a public key system operation. Due to the inherent complexity of the public key system operation, the establishment time of the security association of the ad hoc network is greatly lengthened, and the terminal is increased. power consumption

Images