A wireless terminal authentication method, wireless router and system

Abstract

The invention discloses a wireless terminal authentication method, a wireless router and a system. The system comprises the following steps: by using the wireless router, receiving an authentication request transmitted by a measured wireless terminal, and acquiring an IP (Internet Protocol) address; transmitting a timestamp request packet to the measured wireless terminal, and receiving a returned timestamp reply data packet; determining a timestamp difference value; calculating a clock drift value by utilizing a curve-fitting algorithm according to the timestamp difference value; calculating the similarity between the clock drift value and a clock drift reference value of each legal wireless terminal which is registered in the wireless router; judging whether the measured wireless terminal meets an authentication condition according to the similarity. According to the method disclosed by the embodiment of the invention, authentication information is obtained according to the clock drift value of the wireless terminal; the clock drift values of the wireless terminals have difference, so that the authentication information also has distinct uniqueness; therefore, the probability that the authentication information is faked is reduced; the security of an authentication process of the wireless terminal is improved.

Description

technical field [0001] The invention relates to the technical field of wireless local area networks, in particular to a wireless terminal authentication method, a wireless router and a system. Background technique [0002] With the continuous development of social economy and science and technology, wireless terminals have been more widely used, which greatly facilitates people's daily work and life. [0003] Wireless local area network is one of the main channels to realize Internet access, and improving the security of wireless local area network is an important mission of wireless local area network technology. In order to improve the security of the wireless local area network, the wireless router needs to authenticate the wireless terminal. [0004] In the prior art, in order to realize the authentication of the wireless terminal by the wireless router, an important way is to bind the MAC (MAC, Media Access Control, Media Access Control) address of the wireless termina...

AI Technical Summary

Problems solved by technology

[0005] In the prior art, before querying the MAC address of the wireless terminal under test, the wireless terminal under test needs to provide a login password, and the login password can be intercepted by others through methods such as social engineering and counterfeit routers, so that the wireless terminal authentication process The security of the wireless LAN is not high, which reduces the security of the wireless local area network. In order to obtain the MAC address of the legal wireless terminal, in addition to the normal channels, you can also use the ARP (ARP, Address Resolution Protocol, Address Resolution Protocol) protocol to the legal The wireless terminal initiates an inquiry to intercept. Since the response to the ARP query occurs automatically, any wireless terminal compatible with the 802.11 standard can obtain the MAC address of the legal wireless terminal, which also makes the security of the wireless terminal authentication process not high. This reduces the security of the wireless LAN. In addition, the MAC address of the wireless terminal is easy to be forged. Since the MAC address is included in the link layer frame, and the link layer frame can be easily modified by the upper layer network program, others are passing through After a simple ARP query detects the MAC address of a legal wireless terminal, it can further modify its local MAC address to a legal wireless terminal MAC address, which leads to low security of the wireless terminal authentication process and reduces the security of the wireless LAN sex

Images