WLAN (Wireless Local Area Network) access control system and method based on multi-password identity authentication

Abstract

The invention provides a WLAN (Wireless Local Area Network) access control system and method based on multi-password identity authentication, which aims at taking into account the access control and access control characteristics of a requester, improving the data communication security of the requester and reducing the cost of the control system at the same time. The implementation comprises thesteps that an identity configuration module configures an identity identifier of the requester and a corresponding password and network access authority; a link negotiation module establishes a link with the requester; a pairwise master key calculation sub-module calculates a pairwise master key set corresponding to a password set; a key negotiation sub-module exchanges key material with the requester and receives an information integrity check code; a pairwise temporal key calculation sub-module calculates a pairwise temporal key set; an identity comparison sub-module determines the identityidentifier of the requester; an authentication confirmation sub-module confirms the successful identity authentication to the requester; and an access control module carries out access control on therequester according to network access authority corresponding to the identity identifier of the requester.

Description

technical field [0001] The invention belongs to the technical field of wireless communication, and relates to a WLAN access and access control system and method, in particular to a WLAN access access control system and method based on multi-password identity authentication and key negotiation. Background technique [0002] WLAN (Wireless Local Area Network) is a computer local area network built with wireless channels as the transmission medium. It can be divided into personal and enterprise applications. The sender is the controller of the personal WLAN, and the requester is the user of the personal WLAN. [0003] Password-based identity authentication and key exchange is a kind of protocol that solves the problem of two parties at both ends of the network confirming each other's identity and conducting secure communication. This type of protocol usually assumes that the two parties in communication share a secret value to realize identity authentication and key exchange f...

AI Technical Summary

Problems solved by technology

The requester of the known device identifier of this invention can use different passwords, which improves the security of the data communication of the requester, but the disadvantage is that the requester of the unknown device identifier can only use the same password, resulting in the request or the security of data communication cannot be guaranteed

The advantage of this solution is that the requester's access rights can be pre-configured without relying on the requester's device identifier, which reduces the complexity of access rights configuration, but its disadvantage is that an additional verification server is required to verify the requester's identity and store access profiles, increasing the cost of the system

Cause access control system and access control system can not be used together, lack of ease of use

Images