Method and device for checking management frames in wireless local area networks

Abstract

The invention discloses a method and a device for checking management frames in wireless local area networks. The method comprises: judging whether a management frame carries an MIC (message integrity checkout) message when receiving the management frame; utilizing a pre-configured key to check the message integrity of parts in the management frame except the MIC message when the MIC message is carried and obtaining an MIC check value; and judging the management frame legal when the MIC check value is identical with the MIC message carried by the management frame, otherwise judging the management frame illegal. In the invention, by adding the MIC message to the management frame, a management frame receiver can judge the legitimacy of the received management frame so as to avoid spoofing attack based on the management frame.

Description

technical field [0001] The invention relates to the communication field, in particular to a method and equipment for checking management frames in a wireless local area network. Background technique [0002] In an existing WLAN (Wireless Local Area Network, wireless local area network), when a user (Client) accesses an (Access Point, access point) AP, such as figure 1 As shown, active / passive scanning is required first, and a connection with the AP can only be established after passing the two processes of Authentication and Association. [0003] Among them, the authentication process is to prevent illegal user from accessing, and needs to establish authentication between the user and the AP, when the user selects the wireless network by specifying the SSID (Service Set Identifier, service set identifier) ​​and sends an authentication request (Authentication Request) to the AP, Authentication mechanisms include open system authentication and shared key authentication. Only...

AI Technical Summary

Problems solved by technology

[0006] The problem in the prior art is that there is a spoofing (Spoofing) attack in the existing WLAN, and the potential attacker of this attack will send a management frame as an attack message in the name of other devices

Example: By sending a spoofed deauthentication frame the user is logged off

by image 3 Take the scenario shown as an example, the attacker sends a deauthentication frame to the user as the AP or sends a deauthentication frame to the AP as the user, which will cause the connection between the user and the AP to be interrupted

Images