| This paper belongs to the project "broadband Wireless Network Integrated Authentication Platform", the goal of which is to provide an integrated authentication platform to the client side to access many kinds of WLAN networks. By tying up the platform with wireless terminal, the users of different network can access the network, and realize integrated authentication, access control, key management, uninterrupted roam and switch during different network pattern with a security method. This software system uses existing standard protocol 802.1x, 802.11i as well as WAPI to realize the safety control of wireless access. At the same time the system realizes the expandability of the platform by combining the protocols into the platform with a plug-in module way.The keystone of this paper is to analyze WAPI protocol and realize the module of WAPI in the Wide band Wireless Network Integrated Authentication Platform. The main works are as follows: introduce and analyze the Chinese WLAN country standard WAPI in detail; analyze the security access control principle of WLAN Authentication Infrastructure (WAI), the certificate authenticate process, the key agreement process of unicast \ multicast, as well as the work pattern of WLAN Privacy Infrastructure (WPI), the encapsulation and decapsulation of WPI, encryption algorithm etc; Secure analysis of the WAPI protocol is also made and some issues are pointed out, two improvement schemes are proposed with feasibility proof; Finally the key technologies to realize WAPI module in the platform are described, including the distinguish of WAPLnetwork, the condition to realize WAPI module in the IEEE 802.11b network card, the concrete flow of WAPI module realization, and code of Manage Information Base etc.A wireless network test environment has been built and the test result shows that the Integrated Authentication Platform can correctly recognize WAPI network, and transfer to the WAPI module to access the network. |
PDF Full Text Request