WAPI Certificate Issuance Application Methods and System

Abstract

This invention discloses a WAPI certificate issuance application method and system, including a wireless terminal (STA), a wireless access point (AP), and a WAPI authenticator (AS) capable of sending, receiving, defining and processing WAPI certificate application messages using the 0x88B4 protocol number, and collaboratively completing an online WAPI certificate application. The WAPI certificate application protocol message is defined based on the 0x88B4 protocol number. After receiving the authentication activation message, the STA sends a WAPI certificate application message R1. This invention enables online WAPI certificate application based on the intended WAPI wireless network without relying on other networks, offering good security and convenience. In particular, it meets the management requirements of some organizations that do not allow WAPI wireless terminals to access networks other than the intended WAPI wireless network. Furthermore, it eliminates the need to establish auxiliary networks or systems for online WAPI certificate issuance, reducing the construction cost of the WAPI network and demonstrating good economic efficiency.

Description

Technical Field

[0001] This invention relates to the field of WAPI certificate issuance and application technology, and more particularly to WAPI certificate issuance and application methods and systems. Background Technology

[0002] WAPI (Wireless LAN Authentication and Privacy Infrastructure) is a WLAN security standard and technology specified in the Chinese national standard GB15629.11 for wireless LANs. WAPI uses digital certificates to identify wireless access points (APs) and wireless terminals (STAs), employing a three-factor authentication system to ensure the security of wireless access authentication. In WAPI wireless LANs with high security requirements, both APs and STAs need to install WAPI digital certificates and perform three-factor authentication, which is a crucial foundation for ensuring the security of WAPI wireless networks. The three-factor authentication process is as follows: Figure 2 As illustrated in the WAPI access authentication process, the WAPI authentication process defined in the WAPI standard includes:

[0003] (1) After the wireless terminal STA is associated with the AP, the AP sends an Activation Authentication (ACTIVE) message to the STA, which includes the AP’s certificate information.

[0004] (2) After receiving the authentication activation message from the WAP, the STA sends an access authentication request message to the AP, which includes the STA's certificate information.

[0005] (3) After receiving the access authentication request from the STA, the AP sends a certificate authentication request message to the AS. This message includes the AP's own certificate information and the received STA certificate information.

[0006] (4) After receiving the certificate authentication request from the AP, the AS performs a certificate authentication check, generates a certificate authentication result, and sends a certificate authentication response message to the AP.

[0007] (5) After receiving the certificate authentication response message sent by the AS, the AP will send an access authentication response message to the STA. This message includes the certificate authentication result of the AS. The AP will reject or accept the STA's access based on the certificate authentication result.

[0008] In the three-factor authentication process, one of the most crucial pieces of information is the WAPI certificates of the AP and STA. WAPI uses digital certificates to represent the identity of the AP and STA entities. There are typically two ways to obtain a WAPI wireless terminal certificate:

[0009] Method A: The WAPI Certificate Authentication Server (AS) generates a key pair (including a public key and a private key) for the WAPI wireless terminal and generates a WAPI public key certificate based on the public key. The public key certificate is signed by the AS's private key. Then, the public key certificate and private key of the terminal device are transmitted to the WAPI terminal for installation through a secure channel. This process requires a secure channel for certificate transmission because it includes sensitive information—the private key. In addition to verifying the applicant's identity, the confidentiality and tamper-proof nature of the message must be guaranteed. If this secure channel is conducted online, the transmitted information needs to be encrypted or processed in a secure tunnel.

[0010] Method B: The WAPI terminal generates its own key pair (including a public key and a private key) and then generates a certificate signing request file, called a P10 (short for the international standard PKCS#10) file. The P10 file includes information about the terminal device (applicant's organization, device name, etc.), public key information, but not private key information. It also includes the P10 signature information generated by the generator using its private key. The recipient can use the public key information in the P10 file to sign and verify the P10. The P10 file is then transmitted to the AS, which generates a public key certificate file for the applicant based on the P10 file. The public key certificate file is signed with the AS's private key. This public key certificate file is then distributed to the applicant for installation. This process does not include the terminal device's private key information. During the transmission process, only the applicant's identity and the tamper-proof of the transmitted information need to be checked; there are no other security requirements.

[0011] In recent years, with the advancement of digitalization and intelligentization, WAPI wireless networks have been increasingly used in national critical infrastructure industries, and more and more mobile work terminals, such as robots and work tablets, are connecting to WAPI wireless private networks. In these industries, obtaining certificates for WAPI wireless terminals generally uses the aforementioned method B. For method B, there are two specific ways to implement this process:

[0012] Method B1: Manual Process. The WAPI wireless terminal generates a P10 file, which is then transmitted to the certificate application administrator via email or WeChat over a non-WAPI network connection. The administrator copies the P10 file to a secure USB drive on an external computer, inserts the secure USB drive into an internal computer, copies the P10 file from the secure USB drive to the internal computer, and then submits the P10 file to the WAPI authentication server's web interface to generate a new certificate. The newly generated WAPI certificate is stored on the secure USB drive on the internal computer. Finally, the secure USB drive is inserted into the external computer, which then sends the newly generated WAPI certificate file and the AS's public key file to the applicant.

[0013] Method B2: Assisted System Process. This involves establishing an online system based on a non-WAPI network to complete the WAPI certificate application. When applying for a certificate on a WAPI terminal, the terminal is temporarily connected to the non-WAPI network for networked transmission of P10 files, or the WAPI certificate application is completed online using a software system based on a non-WAPI network.

[0014] Method B1 is cumbersome and inefficient. Method B2 can solve this problem, but it has issues with network construction costs because there is an investment required to build an auxiliary WAPI certificate application network or system. At the same time, in some applications with particularly high security, some WAPI wireless networks do not allow "one device, two networks" in their security management policies, that is, they do not allow a network device to be used in multiple networks. In this case, Method B2 will be limited because WAPI terminals are often not allowed to connect to non-WAPI networks by security management policies.

[0015] Patent 200910189481.4, "A WAPI Certificate Acquisition Method, Device and Network System", provides a method for obtaining WAPI certificates without the aid of non-WAPI networks. However, it is not usable in the national security infrastructure industry because: (1) WAPI terminals used in the production network of the national security infrastructure industry often do not have or are not allowed to have mobile phone functions and do not have the IMSI (International Mobile Subscriber Identity) involved in this patent; (2) There are also certain security problems. The authentication message when WAPI access is transmitted in plaintext. By capturing the relevant message through the air interface, the IMSI information can be obtained. Attackers can use this information to apply for their own certificates. Summary of the Invention

[0016] The purpose of this invention is to address the shortcomings of existing technologies by proposing a WAPI certificate issuance application method and system.

[0017] To achieve the above objectives, the present invention adopts the following technical solution:

[0018] The WAPI certificate issuance application system, including wireless terminals (STA), wireless access points (AP), and WAPI authenticators (AS), can send, receive, and process WAPI certificate application messages, and collaboratively complete the online application for WAPI certificates.

[0019] As a further embodiment of the present invention, the WAPI certificate request protocol message is defined based on the 0x88B4 protocol number. After receiving the authentication activation message, the STA sends a WAPI certificate request message R1. After receiving the R1 message, the AP sends a WAPI certificate request message R2 to the AS. After receiving the R2 message, the AS checks the permissions of the STA, generates a WAPI certificate and a certificate request result, and sends a response message R3. After receiving the R3 message, the AP sends a response message R4 containing the certificate request result to the STA.

[0020] The method and system described above enable online application for WAPI certificates based on the WAPI wireless network to be accessed, without the need for other networks, offering good security, convenience, and cost-effectiveness.

[0021] This invention discloses a WAPI certificate issuance application method, characterized in that the WAPI certificate application message is defined based on the 0x88B4 protocol number, and the interaction process among participating entities includes the following steps:

[0022] S1: After the STA associates with the AP and receives the authentication activation message, if it requests a WAPI certificate, it sends a certificate request message R1 to the AP. The certificate request message R1 includes four necessary fields in addition to the WAPI authentication message header: (1) request identifier, (2) applicant identifier, (3) certificate request P10 file, and (4) message signature SV1. The request identifier uniquely identifies a WAPI certificate request. The applicant identifier can uniquely identify the applicant in the AS system. The certificate request P10 file is a WAPI certificate request file generated by the STA itself. The message signature SV1 is generated by the wireless terminal signing the message with its own private key.

[0023] S2: After receiving the R1 message, the AP first verifies the message signature SV1 of R1. If it passes, the AP sends a WAPI certificate request R2 message to the AS. The R2 message includes five fields in addition to the WAPI authentication message header: (1) request identifier, (2) applicant identifier, (3) certificate request P10 file, (4) AP's WAPI certificate, and (5) message signature SV2. Among them, items (1), (2), and (3) are extracted from the R1 message. The message signature SV2 is generated by signing the message using the AP's private key.

[0024] S3: After receiving the R2 message, the AS first performs signature verification on the R2 message. If it passes, it searches for the applicant based on the applicant identifier. If found, it performs P10 signature verification. If the verification passes, it issues the STA's WAPI certificate based on the P10 file, generates the authorization code and certificate request result for this certificate application, and then notifies the applicant of the authorization code for this application via SMS. Finally, it sends a certificate request response message R3 to the AP. The certificate application result is a combination of multiple information related to this certificate application, including four fields: (1) application result code, (2) STA certificate ciphertext field, (3) AS's certificate, and (4) AS's signature SV_AS. The application result code is represented by a one-byte integer, where 0 indicates success and other values ​​indicate the reason for failure. The AS's signature SV_AS is generated by signing the message using the AS's private key.

[0025] S4: After receiving the certificate request response message R3 from the AS, the AP first performs signature verification on the certificate application result field. If the signature verification is successful, it searches for the STA based on the request identifier in R3. If found, it sends the certificate request response message R4 to the STA.

[0026] S5: After receiving the R4 message, the STA first checks whether the request identifier in the R4 message matches the request identifier in its own R1 message. If they match, it continues to perform message signature SV4 verification based on the AP certificate obtained in the activation message. If the signature verification is successful, it further verifies the signature value of the received certificate application result field. If the certificate application result signature verification is successful, it accepts the AS certificate in the certificate application result. Then, it decrypts the STA certificate ciphertext field of the certificate application result, obtains the request identifier from the decrypted plaintext, and checks whether this request identifier matches the request identifier used by the STA when sending the R1 message. If they match, it indicates successful decryption, and the STA certificate in the plaintext is accepted. This is the WAPI terminal certificate obtained from the WAPI certificate application.

[0027] As a further aspect of the present invention, the R3 message, in addition to the WAPI authentication message header, also includes two fields: (1) request identifier, extracted from R2; and (2) certificate application result.

[0028] As a further aspect of the present invention, the R4 message, in addition to the WAPI authentication message header, also includes three fields: (1) request identifier; (2) certificate application result; and (3) message signature SV4. The message signature SV4 is generated by calculating the message signature using the AP's private key, and the information in (1) and (2) is extracted from R3.

[0029] As a further aspect of the present invention, when the STA decrypts the STA certificate ciphertext, the STA prompts the applicant to enter the authorization code obtained by the applicant from a mobile phone SMS, and then performs decryption operation on the STA certificate ciphertext. The decryption algorithm is the SM4 decryption algorithm in the WAPI technology system, and the password used for decryption is generated by the password derivation algorithm in the WAPI technology system based on the authorization code entered by the applicant.

[0030] As a further aspect of the present invention, the STA certificate ciphertext field is generated by encrypting the concatenation of the request identifier of this WAPI certificate application and the STA WAPI certificate issued by the AS, i.e., {request identifier|| STA WAPI certificate}. The encryption algorithm adopts the SM4 algorithm in the WAPI technology system, and the cipher used for encryption is generated by the cipher derivation algorithm in the WAPI technology system based on the authorization code generated by the AS for this WAPI certificate application.

[0031] The beneficial effects of this invention are:

[0032] 1. This invention enables online application for WAPI certificates based on the intended WAPI wireless network without relying on other networks, offering excellent security and convenience. In particular, it meets the management requirements of some organizations that do not allow WAPI wireless terminals to access networks other than the intended WAPI wireless network. At the same time, it eliminates the need to establish auxiliary networks or systems for online WAPI certificate issuance, reducing the construction cost of WAPI networks and demonstrating good economic efficiency. Attached Figure Description

[0033] Figure 1 This is a schematic diagram illustrating the process of a wireless terminal applying for a WAPI certificate online based on the WAPI network to be accessed, according to the WAPI certificate issuance application method and system of the present invention.

[0034] Figure 2 This is a schematic diagram of a highly secure WAPI wireless network structure for the WAPI certificate issuance application method and system of the present invention;

[0035] Figure 3 This invention relates to the WAPI access authentication process of the WAPI certificate issuance application method and system.

[0036] Figure 4 This is the structure of the WAPI certificate request message R1 in the WAPI certificate issuance application method and system of the present invention;

[0037] Figure 5 This is the WAPI certificate request message R2 structure of the WAPI certificate issuance application method and system of the present invention;

[0038] Figure 6 This is the R3 structure of the WAPI certificate response message in the WAPI certificate issuance application method and system of the present invention;

[0039] Figure 7 This is the WAPI certificate application result of the WAPI certificate issuance application method and system of the present invention;

[0040] Figure 8 This is the R4 structure of the WAPI certificate request message in the WAPI certificate issuance application method and system of the present invention;

[0041] Figure 9 This is a schematic diagram of the structure of the WAPI certificate issuance application method and system of the present invention, including the WAPI certificate application server entity. Detailed Implementation

[0042] The technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments.

[0043] The API protocol message uses the message identifier type 0x88B4, assigned by the IEEE Registration Authority and authorized by the international standard ISO / IEC, for the WAPI protocol. This is the protocol number in the radio frame when the WAPI protocol message is transmitted over the air interface. Before a WAPI wireless terminal (STA) is authenticated through the WAPI wireless network, the AP does not open a data port for the STA, meaning the STA is not allowed to communicate with the AP. However, the terminal and the AP can exchange WAPI protocol messages with protocol number 0x88B4. In the method described in this patent, the WAPI certificate application message is defined based on the 0x88B4 protocol number. This message can be received by the AP's underlying wireless receiving hardware and software before the WAPI wireless terminal accesses the WAPI network, which is an important implementation basis for this patent.

[0044] Example 1:

[0045] like Figure 1 The schematic diagram of the process of a wireless terminal applying for a WAPI certificate online based on the WAPI network to be accessed is a schematic diagram of the method described in this patent.

[0046] The WAPI certificate request messages R1, R2, R3, and R4 are defined based on the 0x88B4 protocol number and the standard WAPI protocol header, as shown in the example header. Figure 3The WAPI protocol header standard definition is shown below; preferably, the protocol type in the header is represented by 0x02 to distinguish it from the standard WAPI authentication protocol type 0x01; the subtype definition is preferably that R1 is represented by 0x01, R2 by 0x02, R3 by 0x03, and R4 by 0x04.

[0047] The structure of the R1 message is as follows: Figure 4 The structure of the WAPI certificate request message R1 is shown, where the request identifier is represented by a 32-bit random number for a specific WAPI certificate request. The applicant identifier in the R1 message can be the applicant's phone number or an identification code within their organization, uniquely identifying each applicant. Before using the wireless terminal STA 201 to apply for a WAPI certificate online, the applicant needs to register their information in AS 203, which must include the aforementioned applicant identifier. The certificate request P10 file in the R1 message is generated by STA 201 itself, including the public key information of the key pair generated by STA 201 and the digital signature of STA based on its private key.

[0048] The structure of the R2 message is as follows: Figure 5 The structure of the WAPI certificate request message R2 is shown, where the request identifier, applicant identifier, and certificate request P10 file are all derived from the corresponding information items in the R1 message.

[0049] The structure of the R3 message is as follows: Figure 6 The structure of the WAPI certificate response message R3 is shown below, where the structure of the WAPI certificate request result field is as follows: Figure 7 The WAPI certificate application result is shown below. In the WAPI certificate application result, 0 indicates that the application was successful, and other values ​​represent the reason code for the application failure. The STA certificate ciphertext field is generated by encrypting the concatenation content {certificate applicant identifier || STAWAPI certificate}. The encryption algorithm adopts the SM4 algorithm in the WAPI technology system. The cipher used for encryption adopts the pre-shared key (PSK) mode cipher derivation algorithm in WAPI technology, which is derived and calculated based on the authorization code generated by AS for this WAPI certificate application. As an optimization scheme, the SM4 algorithm uses ECB mode to simplify encryption.

[0050] The R4 message structure is as follows: Figure 8 The structure of the WAPI certificate request message R4 is shown, and the certificate request result is the same as the request result in the R3 message.

[0051] The R1, R3, and R4 messages, as well as the signatures in the certificate application results, all use the WAPI technology system standard signature algorithm, namely the ECDSA-192 algorithm based on SHA-256, thus ensuring good consistency with the WAPI technology system.

[0052] The three entities in this patent embodiment include a wireless terminal STA 201, a wireless access point AP 202, and a WAPI certificate authenticator AS 203. In conjunction with the method described in this patent, the interaction process and processing actions of these entities in the WAPI certificate application are as follows:

[0053] S1: The wireless terminal STA 201 can distinguish between the WAPI certificate application state and the access authentication state. In the WAPI certificate application state, STA 201 prompts the applicant to enter the identifier UID_r1 of the WAPI certificate applicant through the software interface. When STA 201 is associated with AP 202, AP 202 cannot know that STA 202 is applying for a WAPI certificate, so it still sends a WAPI authentication activation (ACTIVE) message to STA 201 in accordance with the WAPI authentication protocol. After receiving the activation message, STA 201, being in the WAPI certificate application state, generates a 32-bit random number as the request identifier for this application, denoted as RID_r1, and forms a WAPI certificate request message R1, which is then sent to AP 202.

[0054] S2: After sending an activation message to STA 201, the wireless AP 202's protocol state machine enters the terminal access request message state. In this state, if AP 202 receives a WAPI certificate request message R1, it can process the R1 message. This processing includes: performing signature verification on the R1 message. If the signature verification is successful, an R2 message is generated and sent to AS 203, and then the AP 202 enters the WAPI certificate request response waiting state.

[0055] S3: The WAPI authenticator AS 203 is capable of receiving and processing WAPI certificate request messages R2. When it receives the R2 message sent by AP 202, its processing includes: (1) verifying the signature of the R2 message; (2) verifying the signature of the certificate application P10 file; (3) if both signature verifications pass, then search the AS 203 database for the applicant identifier. If not found, no processing is performed; (4) if found, an authorization code for this application is generated and the applicant is notified via SMS; (5) finally, a certificate application result field is generated and an R3 message is sent to AP 202.

[0056] When generating the certificate application result, AS 203 will generate the ciphertext of the STA certificate through encryption. The processing procedure is as follows: (1) AS 203 calculates the ciphertext K using the base cryptography BK derivation algorithm in WAPI technology for the authorization code M generated in this application, that is, K=KD-HMAC-SHA256(CERT_REQ_TEXT, M), where CERT_REQ_TEXT is fixed as "preshared key expansion for requesting cert"; (2) Then, the applicant identifier and the content of the STA WAPI certificate are concatenated using SM4 ECB mode, that is, {request identifier|| STA WAPI certificate}, and this encryption calculation can be expressed as SM4-ECB(K, {request identifier|| STA WAPI certificate}). KD-HMAC-SHA256() and SM4-ECB() mentioned in this process are both common algorithms in the WAPI technology field.

[0057] S4: After receiving the R3 message sent by AS 203, AP 202 first verifies the signature of R3. If the verification is successful, it forms an R4 message and sends it to STA 201.

[0058] S5: After receiving the R4 message sent by the AP 202, the processing procedure of the STA 201 includes: (1) First, checking whether the request identifier in the R4 message is consistent with the request identifier sent by this STA; (2) Performing signature verification on the R4 message based on the public key in the AP certificate obtained in the activation message; (3) If the first two checks pass, further performing signature verification on the certificate application result field in the R4 message, verifying that the public key used for the signature comes from the AS certificate in the certificate application result field; if the signature verification of the certificate application result field is successful, the STA 201 accepts the AS certificate in the certificate application result; (3) Then the STA 201 prompts the operator to enter the authorization code obtained from the applicant's mobile phone SMS for this WAPI certificate application, and performs decryption password derivation calculation based on the entered authorization code to decrypt the plaintext of the STA certificate ciphertext field in the certificate application result; (4) extract the request identifier RID_r4 from the aforementioned plaintext, compare whether RID_r4 is consistent with RID_r1 in the aforementioned S1 step, if they are consistent, it indicates that the decryption is correct, and thus accept the STA certificate in the plaintext.

[0059] When STA 201 decrypts the STA certificate ciphertext in the authentication result field of the R4 message, its password derivation algorithm is the same as the algorithm and related fixed string conventions used by AS 203 in step S3 to generate the encryption key.

[0060] In this embodiment, a clever aspect is that AS 203 only sends the authorization code to the applicant upon receiving the R1 message, avoiding the information exchange required by STA 201 to obtain the authorization code and simplifying the protocol interaction process. However, this also introduces a problem: other wireless terminals can obtain the applicant's identifier from the air interface and then apply for a WAPI certificate from AS 201. This is because at this time, STA 201 and AS 203 do not have any shared information that can be used as material for cryptographic deduction calculations, and can only send the R1 message in plaintext. However, in this embodiment, AS 203 encrypts {request identifier || STA's certificate} to form STA certificate ciphertext, which only STA 201 can decrypt. This is because AS 203 sends the authorization code to the WAPI certificate applicant's mobile phone (associated with STA 201) via SMS. Therefore, the security performance of the method described in this patent is guaranteed, and other wireless terminals cannot impersonate the applicant to apply for a WAPI certificate online.

[0061] The authorization code can be transmitted via SMS as described in this embodiment, but other channels can also be used, such as the instant messaging software of the applicant's workplace, or even telephone communication between the applicant and the system administrator.

[0062] Furthermore, in Embodiment 1, AP 201 and AS 203 may not define messages based on the WAPI protocol message format, but may use other message formats, such as JSON message format, but the key information and processes of the interaction are as described in Embodiment 1.

[0063] Example 2:

[0064] like Figure 9 The diagram illustrates the structure of a WAPI certificate request server entity. A WAPI certificate request server CRS 403 exists between AP 402 and AS 404, and CRS 403 has SMS sending capabilities. In this embodiment:

[0065] (1) The relevant protocols are still based on the 0x88B4 definition of the WAPI certificate application protocol message;

[0066] (2) The R1 and R2 messages in Example 2 are defined the same as those in Example 1 and R2;

[0067] (3) STA 401 also sends the Instance 2 R1 message after associating with AP 401 and receiving the WAPI authentication activation message sent by AP 201;

[0068] (4) After receiving the Example 2 R1 message, AP 402 sends the Example 2 R2 message to CRS 403;

[0069] (5) After receiving the R2 message of Embodiment 2, the CRS 403 searches for the applicant in the database of the CRS 403 according to the applicant identification information therein. If found, it sends a certificate issuance application message, namely the R3 message of Embodiment 2, to the AS 404. The R3 message of Embodiment 2 includes the P10 file generated by the STA 401.

[0070] (6) After receiving the R3 message of Embodiment 2, AS 404 generates the certificate file of STA 401 according to the P10 file in the R3 message of Embodiment 2 and replies to CRS 403 with the R4 message of Embodiment 2;

[0071] (7) After receiving R4 in Example 2, CRS 403 will send an authorization code to the applicant of STA 401 and form the certificate application result as described in Example 1. The composition of the certificate application result and the algorithm related to the STA certificate ciphertext are the same as in Example 1, but the signature of the certificate application result is signed with the certificate of CRS 403; the R5 message in Example 2 also includes the certificate of CRS 405.

[0072] (8) After receiving the R5 message of Embodiment 2, AP 402 extracts the certificate of CRS 405 from the message and verifies the name of the R5 message of Embodiment 2. If the signature verification is successful, AP 402 sends the certificate application result to STA 401 using the R6 message of Embodiment 2.

[0073] (9) After receiving the R6 message of Embodiment 2, the STA 401 performs signature verification on the R6 message of Embodiment 2; the STA 401 uses the same decryption method as the embodiment to decrypt the STA certificate ciphertext of the certificate application result in the R6 message of Embodiment 2 to obtain the plaintext, and obtains the request identifier from the plaintext for comparison and check. If the comparison is successful, the WAPI certificate in the plaintext is used as the certificate of the STA 401.

[0074] The essence of Embodiment 2 is that the CRS 403 performs the registration, inspection and certificate application results related to the application authorization, while the AS 404 simply generates the WAPI certificate based on the P10 file provided by the CRS 403.

[0075] Furthermore, in Embodiment 2, AP 401, CRS 403, and AS404 may not define messages based on the WAPI protocol message format, but may use other message formats, such as JSON message format, but the key information and processes of the interaction are as described in Embodiment 2.

[0076] Both Embodiment 1 and Embodiment 2 enable WAPI wireless terminals to apply for and obtain WAPI certificates online based on the WAPI wireless network to be accessed, offering security and convenience. Embodiment 1 only requires software upgrades to the STA, AP, and AS, while Embodiment 2 adds a new entity, CRS, and also requires software upgrades to the STA, AP, and AS. Embodiment 1 is more economical. However, Embodiment 2 offers the advantage of providing more comprehensive functionality for WAPI certificate applications, such as multi-role certificate application and approval based on electronic workflows, or integration with the user organization's existing electronic workflow system. This approach avoids overcomplicating the AS entity; in this case, the AS only needs a simple upgrade to achieve the desired goal.

[0077] The foregoing has shown and described the basic principles and main features of the present invention and its advantages. It will be apparent to those skilled in the art that the present invention is not limited to the details of the above exemplary embodiments, and that the present invention can be implemented in other specific forms without departing from the spirit or basic features of the present invention. Therefore, the embodiments should be regarded as exemplary and non-limiting in all respects. The scope of the present invention is defined by the appended claims rather than the foregoing description. Therefore, it is intended that all changes falling within the meaning and scope of the equivalents of the claims be included within the present invention, and no reference numerals in the claims should be regarded as limiting the scope of the claims.

[0078] Furthermore, it should be understood that although this specification describes embodiments, not every embodiment contains only one independent technical solution. This narrative style is merely for clarity. Those skilled in the art should consider the specification as a whole, and the technical solutions in each embodiment can also be appropriately combined to form other embodiments that can be understood by those skilled in the art.

Claims

1. A WAPI certificate issuance application system, comprising a wireless terminal (STA), a wireless access point (AP), and a WAPI authenticator (AS), wherein the WAPI certificate issuance application system is capable of sending, receiving, and processing WAPI certificate application messages, and collaboratively completing online WAPI certificate applications, defining WAPI certificate application protocol messages based on the 0x88B4 protocol number, wherein after receiving an authentication activation message, the STA sends a WAPI certificate application message R1, after receiving the R1 message, the AP sends a WAPI certificate application message R2 to the AS, after receiving the R2 message, the AS checks the permissions of the STA, then generates a WAPI certificate and a certificate application result, and sends a response message R3, after receiving the R3 message, the AP sends a response message R4 containing the certificate application result to the STA; the certificate application message R1, in addition to the WAPI authentication message header, also includes four necessary fields: (1) request identifier, (2) applicant identifier, (3) certificate application P10 file, and (4) message signature S. V1; The R2 message, in addition to the WAPI authentication message header, also includes five fields: (1) request identifier, (2) applicant identifier, (3) certificate application P10 file, (4) AP's WAPI certificate, and (5) message signature SV2, of which (1), (2), and (3) are extracted from the R1 message; The R3 message, in addition to the WAPI authentication message header, also includes two fields: (1) request identifier, extracted from R2; (2) certificate application result, which is a combination of multiple information related to the certificate application result, including four fields: (1) application result code, (2) STA certificate ciphertext field; (3) AS's certificate; (4) AS's signature SV_AS; The R4 message, in addition to the WAPI authentication message header, also includes three fields: (1) request identifier; (2) certificate application result; (3) message signature SV4; The message signature SV4 is generated by using the AP's private key to perform message signature calculation, of which (1) and (2) are extracted from R3.

2. The WAPI certificate issuance application method of the WAPI certificate issuance application system as described in claim 1, characterized in that, Based on the 0x88B4 protocol number, the WAPI certificate request message is defined, and the interaction process among the participating entities includes the following steps: S1: After the STA associates with the AP and receives the authentication activation message, if it requests a WAPI certificate, it sends a certificate request message R1 to the AP. The request identifier uniquely identifies a WAPI certificate request, the applicant identifier uniquely identifies the applicant in the AS system, the certificate request P10 file is a WAPI certificate request file generated by the STA itself, and the message signature SV1 is generated by the wireless terminal using its own private key to sign the message. S2: After receiving the R1 message, the AP first verifies the message signature SV1 of R1. If it passes, the AP sends a WAPI certificate request R2 message to the AS. The message signature SV2 is generated by signing the message using the AP's private key. S3: After receiving the R2 message, the AS first verifies the signature of the R2 message. If it passes, it searches for the applicant based on the applicant identifier. If found, it performs P10 signature verification. If the verification passes, it issues the STA's WAPI certificate according to the P10 file, generates an authorization code and certificate application result for this certificate application, and then notifies the applicant of the authorization code for this application via SMS. Finally, it sends a certificate request response message R3 to the AP. The application result code is represented by a one-byte integer, where 0 indicates success and other values ​​represent the reason code for failure. The AS's signature SV_AS is generated by signing the message using the AS's private key. S4: After receiving the certificate request response message R3 from the AS, the AP first performs signature verification on the certificate application result field. If the signature verification is successful, it searches for the STA based on the request identifier in R3. If found, it sends the certificate request response message R4 to the STA. S5: After receiving the R4 message, the STA first checks whether the request identifier in the R4 message is consistent with the request identifier in its own R1 message. If they are consistent, it continues to perform message signature SV4 verification based on the AP certificate obtained in the activation message. If the signature verification is successful, it further verifies the signature value of the received certificate application result field. If the certificate application result signature verification is successful, it accepts the AS certificate in the certificate application result. Then, it decrypts the STA certificate ciphertext field of the certificate application result, obtains the request identifier from the decrypted plaintext, and checks whether this request identifier is consistent with the request identifier used by the STA when sending the R1 message. If they are consistent, it indicates that the decryption is successful, and then it accepts the STA certificate in the plaintext. This is the WAPI terminal certificate obtained from the WAPI certificate application.

3. The WAPI certificate issuance application method according to claim 2, characterized in that, When decrypting the STA certificate ciphertext, the STA prompts the applicant to enter the authorization code obtained from the applicant's mobile phone SMS, and then performs decryption operation on the STA certificate ciphertext. The decryption algorithm is the SM4 decryption algorithm in the WAPI technology system. The password used for decryption is generated by the password derivation algorithm in the WAPI technology system based on the authorization code entered by the applicant.

4. The WAPI certificate issuance application method according to claim 3, characterized in that, The STA certificate ciphertext field is generated by concatenating the request identifier of this WAPI certificate application and the STA WAPI certificate issued by the AS, i.e., {request identifier|| STA WAPI certificate}, and encrypting them. The encryption algorithm adopts the SM4 algorithm in the WAPI technology system, and the cipher used for encryption is generated by the cipher derivation algorithm in the WAPI technology system based on the authorization code generated by the AS for this WAPI certificate application.

Images