Method for preventing WLAN (Wireless Local Area Network) association-breaking attack based on prime factorization verification

Abstract

The invention discloses a method for preventing WLAN (Wireless Local Area Network) association-breaking attack based on prime factorization verification, and belongs to the technical field of communication. The method comprises the following steps that: a STA (Station) transmits an association request frame carrying a generated large composite number; an AP (Access Point) receives the associationrequest frame; the AP transmits an association response frame carrying the generated large composite number; the STA receives the association response frame; the STA transmits a breaking authentication association frame carrying a large prime number; the AP receives the breaking authentication association frame and verifies the large prime number in the breaking authentication association frame; the AP transmits the breaking authentication association frame carrying the large prime number; and the STA receives the breaking authentication association frame and verifies the large prime number inthe breaking authentication association frame. The STA and the AP generate the large prime number and the large composite number which are required during association breaking of the other party at an association stage, and the transmission of the large composite and the large prime number is realized through a frame extension field. Frame reception is authenticated at a breaking stage, so that the STA and the AP are protected from being disconnected exceptionally due to an association-breaking authentication frame transmitted by a malicious third party. Through adoption of the method, the security, protocol compatibility and authentication success rate are improved greatly.

Description

technical field [0001] The invention belongs to the technical field of communications, and relates to a method for preventing WLAN disconnection attacks based on prime number decomposition verification. Background technique [0002] With the continuous development of wireless network technology, Wireless Local Area Networks (WLAN, Wireless Local Area Networks) have been widely used in various occasions, whether in airports, stations, city squares, commercial centers, or in companies, university campuses, or even personal In a home, a large number of wireless access points (AP, Wireless Access Point) are deployed for various wireless terminals (STA, Station) to perform wireless access and use network services. Different from the wired network, the data transmission between AP and STA of WLAN does not rely on any wired medium, it relies on radio waves as the transmission medium, and the data frame exists in the form of broadcast in the air, and the rate can reach 54Mbps, 300Mb...

AI Technical Summary

Problems solved by technology

The problem is that most of the forged frames can be forged from the MAC address to the IP address, so that the forged frames cannot be detected using RARP

However, the attacker can predict the serial number of the frame to be sent by continuously monitoring the air frame information, and then construct a fake frame to send, and then carry out the attack

In summary, the reason why it is easy to send a disconnect authentication association attack is that the disconnect authentication association frame is easily forged by an attacker

Images