Analysis And Studies On The Security Of Protocols Base On WLAN Integrated Authentication Platform

Compared with the traditional network, WLAN have the unexampled merits of convenience and mobility, which made it being used most widely. However, for the special character of open channel, the communication security of WLAN got more and more attention.For the inherent shortage caused by improper design, the security of WLAN protocol current used widely was denounced constantly, and new WLAN standards with high security performance were presented continuously too. On the one hand, the safety of communication got enhanced, on the other hand, the question that the customer could not enter networks running different protocols which brought by the disunion of these new standards had become new obstacle of the WLAN technology development.Based on the precise analysis of those current security protocols, a new concept of WLAN integrated authentication platform was posed in this project, in order to solve the question referred above on some degree. In this paper, the main work about some security questions focused by the project is described as follows:Firstly, a simple analyse of the security services and mechanism of WLAN and the factors threatening the WLAN was given. Secondly, the concept of WLAN integrated authentication platform was posed, the design principle and architecture of the platform were also introduced briefly. At last, after introduced an advanced tool used for formula analysis of security protocol, the Strand Spaces (SS) theory, we enlarged its theory foundation, and based on this extension the detailed formula analysis of IEEE 802.11x- Kerberos and IEEE 802.11i was given in order to promise the security ideal of the platform to be implemented. At last, the national security WLAN standard, WAPI (WLAN Authentication and Privacy Infrastructure), was also analyzed and illuminated from some degree.During the analysis, through the extension of the SS's application range, an improvement method of the Kerberos protocol based on the public key certificate was also offered, which aimed at the shortage of Kerberos that was used to enhance the safety of WLAN, and the security of new protocol was proved too.