Research And Implementation Of WLAN's Certificate Management System Based On WAPI Protocol

Wireless LAN's features include the openness, mobility, high bandwidth, etc and can meet user demand for high-speed access under limited mobile. With the rapid development of technology, WLAN's fast, flexible networking mode and the increasingly higher data rates, is more and more favored by telecom operators. Currently, three operators are full-service operations, in the 3G network matures and the high coverage conditions, the breadth and depth of WLAN hot spot coverage, is strategic resources of operators. It enriches the user a means of access networks to provide differentiated service capabilities. China Telecom is vigorously promoting the deployment of WLAN hot spots, while WLAN network and the CDMA network will combine to provide users with broadband wireless access services. With the continuous expansion of business scale, as well as the type of WLAN user terminal continuously enriched, network and information security issues must be considered and resolved.WLAN security issues that exist in a long history, originated in the 802.11 series of security flaws inherent in the agreement. WAPI protocol is our own intellectual property agreement, the agreement clearly states that using certificate for mutual authentication between user terminals and access devices with the help of server. After authentication, the user terminal and access device proceed key agreement, and since that the communication messages will be encrypted before transmission using the key. The agreement only mentioned the use of WAPI certification mechanism in identification process, but the certificate management system and each module of the system is not descriptive, and certificate management system is an important guarantee for the safe use of the certificate. The paper by studying the certificate-based authentication process, design the certificate management system, specify management system and operational processes related to the certificate, focus on the roaming user authentication scheme. Finally, the paper gives the implementation of key modules in Certificate Management System.