WLAN (wireless local area network) credible transmission realization method based on 802.1x authentication protocol

A technology of authentication protocol and implementation method, applied in the direction of wireless network protocol, wireless communication, security device, etc., to achieve the effect of ensuring real connection and realizing transparency

CN102223635BInactive Publication Date: 2013-12-11BEIJING JIAOTONG UNIV
4 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Publication Date
2013-12-11
Estimated Expiration
Not applicable · inactive patent

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The present invention relates to a method for realizing WLAN trusted transmission based on 802.1x authentication protocol. The EAP data packet of the Request type is sent to the authenticator, where the value of the Type field is TPM, indicating that the authentication server needs to remotely authenticate the client, and the value of the TypeData field is the type of platform status information to be verified. The authenticator then forwards the Request packet to the client. After receiving the packet, the client generates client platform verification information based on the value of the Type field, the client's master session key, and the client's platform information, and sends it to the authenticator; the authenticator then forwards it to the authentication server. After the authentication server receives the verification information of the client platform, it verifies the verification information of the client platform according to the master session key of the authentication server, and sends an EAP packet of type Success to the client after the verification is passed.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention belongs to the field of computer information security, in particular to a method for realizing WLAN trusted transmission based on 802.1x authentication protocol. Background technique

[0002] IEEE 802.11i is a security standard proposed by the IEEE 802.11 working group, which is used to solve security issues of IEEE 802.11 wireless local area network (Wireless Local Area Network, WLAN for short). The IEEE802.1x protocol is an authentication protocol in the IEEE 802.11i standard. Its architecture includes three parts: client, authenticator, and authentication server. Its main function is to authenticate WLAN access users. After the 802.1x authentication protocol runs, the client and the authentication server will negotiate a master session key PMK (Pairwise Master Key), which will be passed to the authenticator by the authentication server to calculate the pairwise session between the client and the authenticator. Wait for the temporary k...

Examples

Embodiment Construction

[0039] A method for realizing WLAN trusted transmission based on the 802.1x authentication protocol of the present invention requires the client to be equipped with a trusted security chip TPM on hardware, and its BIOS supports the TPM; and requires the client to install a measurement module on software. The client has its own AIK public and private keys. The method provided by the present invention needs to make the following modifications to the 802.1x authentication protocol:

[0040] (1) Define a new value for the Type field in the EAP packet, denoted as TPM, which is used to indicate that the authentication server side needs to verify the platform status information of the client. When the value of the Type field is TPM, the value of the corresponding TypeData field is used to describe the type of platform information to be verified. In the present invention, an EAP-Request (Response) whose Type field value is TPM is recorded as EAP-Request (Response) / TPM.

[0041] In t...