Research On The Technology Of Access Authentication Under Fit AP Architecture In High Density Wireless Environment

Rapid development of wireless networks and the infrastructure proposed new requirements for access authentication technology, Fit AP architecture and high-density wireless environment are products of the development of wireless technology IEEE802.1X access authentication mechanism provides a good protection for wireless network, In the high-density wireless environment, the traditional access authentication facing many problems .DAA is based on Fit AP architecture,using 802.1X/EAP-TLS authentication method, and separates the authentication and authorization functions, authentication located in the AP and authorization located in the authorization server in the background. In the high-density wireless environment, for the case that a large number of users may simultaneously connect the network and take access authentication, the authentication system effectively reduce the pressure of the centralized authentication server, the authentication costs spread out in every AP, to avoid issue that large number of authentication packets focus on the authentication server in the same time, which led to a sharp decrease of network capabilities, make it difficult for the user to access the network.The Pre-caching Key fast re-authentication technique in this distributed system DAA,is used to reduce the cost of re-authentication.For the key management located in the AP, the Pre-caching Key technique AP will send a copy of the pairwise master key to the AC after the client obtain authorization, When a client roams to a new AP, the new AP can get the key on AC, then they can re-use the key by identifying the PMKID, to achieve the purpose of reducing the complexity of the authentication process, improve re-authentication speed, reducing the overhead of the network.The Distributed Authentication Architecture and Pre-caching Key fast re-authentication technique we proposed have important theoretical significance and practical value.Our DAA authentication system was proposed for the practical issues in the construction of our school network, and was applied to our school network, it is a effective solution to the issues above.