Detecting system and method for realizing negative test on robustness in WAPI (Wireless LAN Authentication and Privacy Infrastructure) equipment protocol

Abstract

The invention relates to a detecting system and method for realizing negative test on robustness in a WAPI (Wireless LAN Authentication and Privacy Infrastructure) equipment safety protocol. The system comprises a detection control console, a concentrator and WAPI equipment; the detection control console is connected with the WAPI equipment through the concentrator; the WAPI equipment comprises reference equipment and equipment to be tested, wherein the reference equipment is the WAPI equipment which accords with the rule of the WAPI protocol standard and can construct and send abnormal messages with fixed field filing errors, and the reference equipment sends an abnormal WAPI distinguishing message with special field filling errors to the equipment to be tested according to a WAPI negative test term; and the detection control console acquires received and sent messages including the messages which are abnormal in the negative test in the detecting process and makes protocol analysis and negative test protocol analysis. The invention provides the detecting system and method for realizing negative test on robustness in the WAPI (Wireless LAN Authentication and Privacy Infrastructure) equipment protocol.

Description

technical field [0001] The invention belongs to the field of detection of wireless communication security protocols, and relates to a detection system and a detection method for realizing robust negative testing in the protocol of the wireless local area network equipment security protocol WAPI. Background technique [0002] The WLAN authentication (or authentication) and privacy infrastructure (WLAN Authentication and Privacy Infrastructure, WAPI) protocol consists of two parts: WAI (Wireless LAN Authentication Infrastructure) and WPI (WLAN Privacy Infrastructure). With the popularization of WAPI technology, the WAPI equipment developed by WAPI manufacturers is also more and more diverse. The WAPI equipment developed by manufacturers, such as user terminals (Station, STA), access points (Access Point, AP), authentication servers (or Authentication) server (Authentication Server, AS), in the development process, some manufacturers' equipment development is not perfect, the i...

AI Technical Summary

Problems solved by technology

With the popularization of WAPI technology, the WAPI equipment developed by WAPI manufacturers is also more and more diverse. The WAPI equipment developed by manufacturers, such as user terminals (Station, STA), access points (Access Point, AP), authentication servers (or Authentication) server (Authentication Server, AS), in the development process, some manufacturers' equipment development is not perfect, the implementation protocol is not robust enough, and it is not strictly in accordance with the protocol standard. Compared and judged, the lack of correct processing ability for abnormal messages filled with wrong specified fields, thus causing the equipment to be difficult to complete the normal WAPI protocol identification process, causing the equipment to perform WAPI protocol CCCi detection in the Radio Monitoring Center and China Commercial Cryptography Research Center encountered problems

At present, there is no test method to judge the robustness of the implementation of the WAPI protocol device protocol, so that the device manufacturer or operator cannot judge whether the WAPI device developed by the device manufacturer is developed in accordance with the WAPI protocol standard.

Images