A Research On Wireless LAN Security Framework And Access Control Based On SSL VPN

As wireless technologies have emerged and gained popularity, security-related concerns have proliferated gradually. It's hard to protect information on the wireless network as they are transmitted by radio and this is the very root of all the security-related problems.Researching work on traditional security strategies is focused on two aspects: encryption and authentication. Traditional security strategies can protect wireless communication with data encryption and authentication to some extent. But none of the WEP/TKIP/CCMP protocol can enhance more than confidentiality and none of the authentication methods can provide lightweight access control to the resources behind the gateway except those authentications between APs and STAs.All the limitations can be solved by finding a security framework to promote the performance of the wireless network with consideration to data confidentiality, integrity and validity of both devices and users. When it comes to implementation, the SSL VPN method of the WLAN security framework is a perfect solution with RFs and AP management modules to identify APs and keep the wireless network in order and with SSL-Explorer access control modules to authenticate and authorize users to different services behind the gateway through secure tunnels.Discussion on the OTP(one time password) authentication mode concluded that when using OTP to access the resources internal, a client user should has the authority according to the access control strategies and should pass the authentication based on the devices. And this provides the opportunity to higher implementation flexibility and to reduce the stress of security problems oriented by roaming around.Together with the conclusion on the performance of the implementation based on SSL VPN comes the preview on futher work.