Method and device for terminal authentication in wireless local area network

Abstract

The embodiment of the invention provides a method for terminal authentication in a wireless local area network, and the method is used in wireless access equipment. The method comprises the steps: generating a first secret key corresponding to an identity label of a user, and a first paired main secret key PMK corresponding to the first secret key; receiving an access message which is transmitted by a wireless terminal and comprises a first message integrity verification code MIC generated by the wireless terminal according to the first secret key inputted by the user and the first paired main secret key PMK corresponding to the first secret key; searching a second secret key and a second PMK corresponding to the second secret key in a secret key database; generating a second MIC according to the second PMK corresponding to the second secret key; and determining that the access of the wireless terminal is successful when the first MIC is the same as the second MIC. The embodiment of the invention also provides a device for terminal authentication in the wireless local area network. According to the embodiment of the invention, the method speeds up the access of the terminal to the network, and is simple in deployment.

Description

technical field [0001] The invention relates to the field of data communication, in particular to a method and device for terminal authentication in a wireless local area network. Background technique [0002] With the popularization of wireless network use, wireless network security has attracted more and more attention. The early WEP (Wired Equivalent Privacy) authentication method has been abandoned because it is easy to be cracked. At present, 802.11i is widely used in the industry. The PSK (Pre-sharedKey, pre-shared key) and 802.1x authentication methods specified in the standard, the difference between the two is the way to obtain PMK (PairwiseMasterKey, paired master key), PSK is based on the key configured on the device side Obtain the PMK, and 802.1x obtains the PMK after successful authentication. [0003] PSK authentication uses a pre-shared key for authentication. The device side configures a key, and then tells the user the key, and the terminal uses the key to...

AI Technical Summary

Problems solved by technology

Although this authentication method solves the defects of traditional PSK authentication, it is too complicated to deploy and requires a Radius (Remote Authentication Dial In User Service, remote user dial-in authentication system) server; even terminal access to the network requires two authentications, which increases the number of terminals. operational complexity

Images