Research And Implementation On Anonymous Mutual Authentication EAP-AMAM In 3G-WLAN Integrated Network

This thesis focuses on the safety issues of 3G-WLAN(Third Generation Wireless Local Area Networks) access authentication and the main work are shown as follows:1. Constructing an access authentication model and proposing an anonymous mutual authentication mechanism EAP-AMAM for 3G-WLAN. This mechanism eliminates unreasonable assumptions, and achieves a two-way authentication between WLAN access network and 3G home network. By encrypting the user’s identity information with 3G public key of the home network, it achieves user privacy protection. Hash chain is used as the authentication credential, avoiding the overhead generated by five certified vectors. The local fast re-authentication process proposed here improves efficiency of certification by reducing the number of round news.2. Analyzing and verifying the security of EAP-AMAM with AVISPA formal analysis tools. By adopting the HLSPL language for EAP-AMAM modeling, and writing source code, we make the formal verification with four different analysis AVISPA terminals. The verification results demonstrate that EAP-AMAM authentication mechanism can achieve the goals set by the security authentication which can greatly enhance the network access authentication security.3. Designing and implementing a prototype system of 3G-WLAN access authentication. It describes the system structure, client software, server software, system functions and features of each module in detail. Meanwhile, we have tested the system function and performance of EAP-AMAM, comparing the EAP-AMAM certification delay with other certification mechanism. The test results illustrate that the prototype system successfully have achieved the desired goals of the EAP-AMAM mechanism for WLAN access authentication. EAP-AMAM can not only increase security, but significantly enhance efficiency.In this thesis, we have achieved some innovations and exploration on the design of 3G-WLAN access authentication mechanism and system. Results of this research is an important part of a research fund project and is significant for improving the survivability of network systems, unifying heterogeneous network interconnection and access.