The Key Technology Of Wireless Local Area Network Key Management

WLAN has already become the typical application of wireless communication technology to the network. With the flexible movement, fast and simple installment, lower cost, robust expansibility and the convenience of maintenance and management,it develops quickly in recent years. While the rapid development of WLAN,security in network has put forward higher demands too.The security system used nowadays is outstanding in three aspects: key algorithm, authentication mechanism and key management. The key management is the base of code and authentication mechanism, and it is also the weak part of WLAN's security mechanism at present. In order to protect the WLAN, the suitable key management mechanism must be disposed, which prompts to produce and distribute dynamically. Thus, it is necessary and important to study the Key management problem of WLAN.Aiming at the robust security of WLAN, the paper deeply analyzed the critical technology of WLAN's key management.Based on the WLAN, the article first analyzed the confronting security problem from the aspect of WLAN's characters, and got the WLAN security demand suitable to the current atmosphere. Then the article discussed the WLAN security method from its appearance till now, especially the outstanding Wi-Fi standard technology, which is designed for the purpose of solving the security problem, such as WEP, WPA, VPN, 802.1x and 802.11i, and analyzed their advantages and disadvantages.Then, the article introduced the technology of key management, the strategy of WEP and WPA key management as well as the security problem. On the basis of the whole structure and security mechanism of RSN of WLAN, it analyzed the key hierarchy of RSN, the generation and the distribution of temporary key, 4-way handshake key agreement mechanism, key distribution method, and it also put forward two improveds 4-way handshake scheme that not only maintains the security level but also fasten the key distribution.The other is based on the improved SAKA arithmetic of multicast key distribution frame and resolved the problem of the key generation and updating. With key management and RADIUS authentication technology, a security project is put forward which could offer two-way authentication and session dynamic encryption between mobile station and wireless access point. Key management server could offer dynamic key that session encrypting uses, and authentication server could implement two-way authentication. The production and grant course of key were researched and designed.