A method of improving public Wi-Fi network security based on wpa/wpa2 PSK multi-cipher

Abstract

A method for improving public Wi-Fi network security based on WPA / WPA2PSK multiple passwords. The invention belongs to the field of information security. Limited by WPA / WPA2PSK, Wi-Fi networks in public places can usually only set a single public password at present. People within the coverage area can steal user information through packet capture and decryption, forged phishing APs, intranet packet capture, and intranet man-in-the-middle attacks, which will bring hidden dangers to user information security. The present invention sets multiple sets of different WPA / WPA2PSK passwords for users to use through a single Wi-Fi network. Users do not know other people's passwords and are isolated from each other, thereby preventing user data from being stolen and improving the confidentiality of Wi-Fi users surfing the Internet in public places And the security of online transactions, while keeping the user's hardware, software, and connection methods unchanged, ensuring compatibility with the original user-end equipment.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to a method for improving public Wi-Fi network security based on WPA / WPA2 PSK multiple passwords. Background technique [0002] At present, the main encryption methods of Wi-Fi network are as follows: WEP (Wired Equivalent Privacy), WPA (Wi-Fi Protected Access) / WPA2 PSK (Pre-shared Key), WPA / WPA2 Enterprise. Among them, WEP is rarely used because of serious security problems; WPA / WPA2 PSK is a widely used encryption method, but it has certain limitations, that is, all people connected to the Internet can only use a single password set by the AP (Access Point). When connecting with a public password, anyone who knows the password can steal the data of other users, and the data transmitted through a non-SSL (Secure Sockets Layer) connection can be stolen directly by capturing the packet and then decrypting it with the public password; and For the SSL connection, you ca...

AI Technical Summary

Problems solved by technology

Among them, WEP is rarely used because of serious security problems; WPA / WPA2 PSK is a widely used encryption method, but it has certain limitations, that is, all people connected to the Internet can only use a single password set by the AP (Access Point). When connecting with a public password, anyone who knows the password can steal the data of other users, and the data transmitted through a non-SSL (Secure Sockets Layer) connection can be stolen directly by capturing the packet and then decrypting it with the public password; and For the SSL connection, you can use the public password to forge the phishing AP, and then use the SSLStrip to remove the SSL to steal

Therefore, there are security risks when used in public places; WPA / WPA2 Enterprise can set multiple sets of user names and passwords through EAP (Extensible Authentication Protocol) encryption, which has high security, but it needs to pass independent RADIUS (Remote Authentication Dial In User Service) Authentication by the server is expensive and requires the support of the client device. The encryption algorithm is intricate, and some require manual import of certificates. The use of users is cumbersome and has not been widely used.

Images