WLAN (wireless local area network) credible transmission realization method based on 802.1x authentication protocol

Abstract

The invention relates to a WLAN (wireless local area network) credible transmission realization method based on a 802.1x authentication protocol; the method comprises the following steps: when a client side and an authentication server finish authentication message interactive process and respectively compute a main session secret key, the authentication server packages one EAP (extensible authentication protocol) data packet with Request type and transmits the data packet to an authenticator, wherein the value of a Type field is TPM (trusted platform module), namely, the authentication server side carries out remote attestation to the client side, wherein the value of a TypeData field is a type of verified platform state information. And then the authenticator transmits the Request packet to the client side; after receiving the packet, the client side generates client side platform authentication information according to the value of the Type field, the main session secret key of the client side and the platform information of the client side transmits the client side platform authentication information to the authenticator; and then, the authenticator forwards the information to the authentication server side. The authentication server side carries out verification to the client side platform authentication information according to the main session secret key of the authentication server side after receiving the client side platform authentication information, and after verification is qualified, the authentication server side transmits the EAP data packet with Success type to the client side.

Description

technical field [0001] The invention belongs to the field of computer information security, in particular to a method for realizing WLAN trusted transmission based on 802.1x authentication protocol. Background technique [0002] IEEE 802.11i is a security standard proposed by the IEEE 802.11 working group, which is used to solve security issues of IEEE 802.11 wireless local area network (Wireless Local Area Network, WLAN for short). The IEEE802.1x protocol is an authentication protocol in the IEEE 802.11i standard. Its architecture includes three parts: client, authenticator, and authentication server. Its main function is to authenticate WLAN access users. After the 802.1x authentication protocol runs, the client and the authentication server will negotiate a master session key PMK (Pairwise Master Key), which will be passed to the authenticator by the authentication server to calculate the pairwise session between the client and the authenticator. Wait for the temporary k...

AI Technical Summary

Problems solved by technology

At present, there is no research report or software on applying the remote attestation technology of trusted computing transparently to the 802.1x authentication protocol to establish a trusted channel. Transparency refers to the key exchange protocol that integrates the remote attestation technology into the secure channel technology. , there is no need to modify the specific authentication mechanism

Images