System and method for two-way access authentication of wireless local area network based on identity credential

Abstract

A two-way access authentication system and method for a wireless local area network based on identity certificates belongs to the field of wireless network security. The identity certificates of entities in the security domain are managed, including issuing identity certificates and maintaining identity certificates; the authentication server is used to verify the mobile user’s access authentication application and complete the shared key negotiation with the mobile user; the access router is used to The returned verification result controls whether the mobile user accesses the WLAN, and at the same time, the access router receives and forwards the authentication message between the mobile user and the authentication server. In an autonomous security domain, the present invention can not only realize the two-way access authentication and key negotiation between the mobile user and the access network, but also support the efficient access authentication of the mobile user when switching between different access routers, thereby improving access authentication. efficiency.

Description

technical field [0001] The invention belongs to the field of wireless network security, and in particular relates to a two-way access authentication system and method for a wireless local area network based on identity certificates. Background technique [0002] With the rapid development of computer networks and mobile communication technologies, a large number of mobile devices have emerged, and people's demand for ubiquitous network access is becoming more and more urgent. As the extension and extension of the Internet, IEEE802.11 Wireless Local Area Network (WLAN) has become the best solution for the "last mile" access field due to its advantages of flexible deployment, heterogeneous compatibility, low cost, and rich bandwidth. [0003] However, with the widespread deployment of WLAN, its security issues began to emerge. The next-generation wireless communication system requires WLAN to provide users with efficient and secure access services in an open environment, and ...

AI Technical Summary

Problems solved by technology

However, the private key of the entity is distributed by the private key generation center (PrivateKeyGenerator, PKG), which leads to a series of security issues such as key escrow and key transmission, making this type of scheme limited to applications in a small-scale trusted network

[0005] It can be seen that the above-mentioned WLAN security mechanism has defects in authentication message exchange delay, digital certificate maintenance cost and applicability, and more importantly, when a mobile user switches between different access routers accessing the network, the complete access authentication process requires Re-execution further reduces the efficiency of access authentication

Images