Key Technology Of WLAN Identity Authentication Based On Windows Mobile Platform

With the rapid development of computer technology, people are being connected by all kinds of wire or wireless networks. At present, WLAN (Wireless Local Area Network) and cellular mobile network have being the most widely used in all kinds of wireless network. Making use of these two kinds of network's advantage, operators can layout AP in some "hot spot", such as coffee shops and airports, etc, and provide high access rate at least 54Mbps for users.Because of its wireless characteristic, the security of wireless network is much more important. It is necessary for WLAN Integration with the Cellular Mobile Network to adopt a strong authentication mechanism. Several authentication methods are supported depending on the type of different wireless network architectures. This thesis focuses on WLAN Integration with Cellular Mobile Network, The EAP-SIM access authentication mechanism is adopted. EAP-SIM authentication mechanism specifies an Extensible Authentication Protocol (EAP) mechanism for authentication and session key distribution using the Global System for Mobile Communications (GSM) Subscriber Identity Module (SIM). The EAP-SIM authentication mechanism specifies enhancements to GSM authentication and key agreement whereby multiple authentication triplets can be combined to create authentication responses and sessions keys of greater strength than the individual GSM triplets. The mechanism also includes network authentication, user anonymity support, result indications, and a fast re-authentication procedure.Depending on WLAN Integration with Cellular Mobile Network architecture, we design the EAP-SIM authentication mechanism in WLAN Integration with Cellular Mobile Network. At the same time, we analyze each authentication procedure (TTLS tunnel is established, Identity, EAP-SIM/Start, EAP-SIM/Challenge, and EAP-Success), then we propose and implement a solution to support EAP-SIM authentication mechanism on Windows mobile platform. In the process of implementation, the flaw of EAP-SIM authentication mechanism is analyzed, one solution is provided to improve the flaw of EAP-SIM authentication mechanism. Security test guarantee security of IMSI and GSM triplets wouldn't be repeated.