Safety access method of wireless metropolitan area network

Abstract

The invention relates to a method for safe accessing of a wireless metropolitan area network, which comprises an authenticating step and a session key negotiating step. The authenticating step comprises that: a subscriber station SS sends a request message for access authentication to a base station BS; the BS sends a request message for certificate authentication to an authentication server AS; the AS verifies the request message for certificate authentication and sends a response message for certificate authentication to the BS; the BS verifies the validity of the identity of the SS according to the response message for certificate authentication; if the SS is valid, the BS sends the response message for access authentication to the SS; the SS verifies the validity of the BS according to the response message for access authentication; if the BS is valid, the SS uses the encryption certificate key of the SS to decrypt the material of authentication key. The SS signing certificate in the proposal is used for stating the identity and the SS encrypting certificate is used for encrypting and decrypting the material of authentication key so as to reduce the risk that the key is decrypted; through verifying the certificates of the BS and the SS by the AS, authentication for the subscriber station SS and the base station BS is realized and security level is improved.

Description

technical field [0001] The present invention relates to wireless networks and information security, and more particularly, to a secure access method for wireless metropolitan area networks. Background technique [0002] In the field of wireless metropolitan area network, the current mainstream technologies and standards are mainly the IEEE802.16 series of standards organized by the IEEE. In the existing wireless metropolitan area network, when a subscriber station (Subscriber Station, SS for short) accesses a base station (Base Station, BS for short), steps such as authentication and key negotiation need to be performed. In the authentication and authentication process, the base station BS authenticates and authenticates the user station SS through the digital certificate of the authentication user station SS, so as to prevent the illegal user station SS from accessing the wireless metropolitan area network. The specific authentication process includes: [0003] 1) The sub...

AI Technical Summary

Problems solved by technology

It can be seen that in addition to signature verification, the certificate of the user station SS also undertakes the work of encrypting and decrypting the authorization key. Frequent use of the key of the same certificate will increase the possibility of the certificate key being cracked and reduce the security of the system. grade

Images