Study And Implementation Of Authentication Technology In WLAN-3G Integrated Network

The Third Generation Mobile Communication System (3G) provides mobility across the Wide Area Network (WAN), but its data throughput rate is relatively low. Wireless Local Area Network (WLAN) provides high bandwidth, but it just can be used in the limited coverage area. Therefore, the integration of two kinds of network for the purpose of advantages complement may enhance the efficiency and flexibility of wireless transmission services. However, mobile subscribers of the integrated network are in an open environment, and still need relevant authentication technologies to solve security problems, such as identity eavesdropping, external attacks etc. when interacting with communication network so as to implement subscribers'secure access and ensure the data's secure transmission.This paper expounds the architecture of WLAN-3G integrated network, analyzes the performances of integrated scenarios, interworking reference models and integrated schemes, then indicates that security plays an important part in integrated network. On this basis, this paper studies and establishes an authentication system for WLAN-3G integrated network, including purposes, structure as well as key technologies, and analyzes authentication technologies deeply. This paper also proposes a solution against the deficiency that EAP-AKA may undergo the WLAN AN masquerade attack and presents the corresponding security analysis. The solution adopts a method that two entities verify WLAN AN respectively in order to improve WLAN AN's security performance and carry out the secure authentication process without influencing the efficiency.On the basis of the authentication system, this paper proposes a development program for WLAN-3G integrated network access authentication system, designs and implements system's authentication server. By building the experiment platform and testing the system, analysis result indicates that the system achieves the mutual authentication between mobile terminals and core network in the integrated network, and guarantees the data transmission security in wireless link.