A Mutual Authentication Protocol Of Encrypted WAP

WAP is an open protocol that widely used in modern business to provide mobile users with Internet services and also value-added services. But there is some limitation when protocols are transformed to other types. In the WAP gateway data encrypted in WTLS should be decrypted before encrypted in another protocol SSL, it is very short time, but enough for illegal users to get the plain text. On the other hand, the protocol only provide one-way authentication, that is, the server can authenticate clients, but clients can't authenticate the server. If someone performed an impersonation attack, the clients can not make an authentication with server, and then the clients' data would be stole by the attacker.In this thesis, we will present a mutual authentication protocol of encrypted WAP. In this protocol we provide mutual authentication and encrypt the data with AES firstly before the data transferred to the WAP gateway by WTLS or SSL.