Access authentication processing method and system, terminal as well as network equipment

Abstract

The embodiment of the invention provides an access authentication processing method and system, a terminal as well as a network equipment. According to the embodiment of the invention, the EAP (Extensible Authentication Protocol) authentication process and the four-step handshaking process in the prior art can be saved; and the authentication and key distribution process can be finished only by three authentication messages, so that the number of the messages is greatly reduced; however, message replay attack can be similarly prevented through the current counter value of a counter. Therefore, the embodiment of the invention can be suitable for two standard processes 802.11i and 802.11r; and by using the embodiment of the invention, rapid and safe initial access authentication of WLAN can be achieved, the time required by initial access authentication is reduced and the complexity of the implementation is reduced.

Description

technical field [0001] The embodiments of the present invention relate to the communication field, and in particular to an access authentication processing method and system, a terminal and a network device. Background technique [0002] In order to make up for the defect of the low security of the Wired Equivalent Privacy (WEP) protocol, the Institute of Electrical and Electronics Engineers (hereinafter referred to as IEEE) launched the Wireless Local Area Network (WLAN). , hereinafter referred to as: WLAN) security standard 802.11i; in order to quickly switch terminals between Access Points (AccessPoint, hereinafter referred to as: AP), IEEE launched the standard 802.11r. [0003] For the initial secure access process between the terminal and the AP in 802.11i, 802.11i adopts the EAP authentication process after the open authentication process and the association process and the four-step handshake process for the terminal's initial access authentication and key distributi...

AI Technical Summary

Problems solved by technology

[0005] Regardless of the initial access process in 802.11i or 802.11r, it needs to include the open authentication process, association process, EAP authentication process, and four-step handshake process. The number of interactions is large and the time is long, which is not conducive to Improve network air interface utilization efficiency

Images