Wireless metropolitan area network system and identification and verification method thereof

Abstract

The invention discloses a wireless metropolitan area network system and an identification and verification method of a wireless metropolitan area network. The wireless metropolitan area network system comprises a certificate authority server CA and an identity identification server AS, wherein the certificate authority server CA authorizes certificates for the identity identification servers AS, BS and SS through a CA signing certificate and a private key; the BS is provided with a BS signing certificate, a trusting AS signing certificate and a CA signing certificate, and the SS is provided with an SS signing certificate, an SS encryption certificate, a trusting AS signing certificate and a trusting CA signing certificate; and the identity identification certificate AS is provided with anAS signing certificate and a CA signing certificate and uses a public key of the CA signing certificate to identify the certificates of the BS and SS. According to the scheme of the invention, certificate authority and identity identification are separated effectively, so that the wireless metropolitan area network system can be compatible with the conventional infrastructure such as the certificate authority server CA.

Description

technical field [0001] The invention relates to the technical field of wireless communication, in particular to a wireless metropolitan area network system and an authentication method thereof. Background technique [0002] As one of the main technologies of broadband wireless access technology, wireless metropolitan area network has attracted wide attention from all walks of life. However, safety issues have always restricted its further promotion and development. The IEEE 802.16d standard defines an authentication protocol based on public key encryption algorithm (RSA) and digital certificates, which can realize the authentication of BS (Base Station, base station) to SS (Subscriber Station, user station). However, IEEE802.16d exists The main disadvantage of BS is that it only provides one-way authentication of BS to SS, but does not provide authentication of SS to BS. It is very easy for fake BS to deceive SS. In addition, both the authorization key (AK) and the session...

AI Technical Summary

Problems solved by technology

However, safety issues have always restricted its further promotion and development.

The IEEE 802.16d standard defines an authentication protocol based on public key encryption algorithm (RSA) and digital certificates, which can realize the authentication of BS (Base Station, base station) to SS (Subscriber Station, user station). However, IEEE802.16d exists The main disadvantage is that it only provides one-way authentication from BS to SS, but does not provide authentication from SS to BS. It is very easy for fake BS to deceive SS

[0004] However, in the scheme disclosed in the above-mentioned patent application No. 200810027930.0, the issuanc

Images