Key consulting method for switching mobile station in wireless local network

Abstract

A crypto key negotiation method used in switching mobile station in WLAN includes: presets the authentication counting information and authentication crypto key information on the mobile station and authentication server; the authentication server calculates the authentication counting information and the authentication crypto key information for the neighboring access point of the current access point of the mobile station, and transmits the authentication counting information and authentication crypto key information to the neighboring access point; the neighboring access point sets the authentication counting information for the mobile station, and uses the received server authentication counting information to renew the authentication counting information of new access point; waits for mobile station access; after confirming the access point the mobile station receives the authentication counting information of access point and the authentication crypto key, compares them with the authentication counting information and the authentication information generated from the mobile station itself, if they are identity, then finishes the negotiation, otherwise makes crypto key negotiation according to the crypto negotiation method of first access.

Description

technical field [0001] The invention relates to a wireless local area network communication technology, in particular to a key negotiation method for mobile station switching in a wireless local area network. Background technique [0002] With the development of wireless local area network communication technology, users need safe, efficient and seamless wireless communication solutions. According to the wireless local area network security enhanced protocol draft (IEEE 802.11i Draft 3.0), the handover of the mobile station between different access points includes two processes of the mobile station searching for a new target access point and key negotiation. Searching for a new target access point refers to the process that the mobile station searches the neighbor access points of the current access point to determine the next roaming target access point; The session key negotiation must be carried out before the service transmission, and the session key is generated throu...

AI Technical Summary

Problems solved by technology

However, this method has certain limitations: first, the premise of using this pre-authentication method is that there is a large overlap in the coverage areas of different access points, so as to ensure that the mobile station completes pre-authentication before handover, but the overlap of coverage areas is wasteful. There are many wireless resources, which will inevitably increase the cost of building a wireless network; on the other hand, the pre-authentication scheme defined by the IEEE 802.11i protocol requires the mobile station to perform two-way authentication with the authentication server when it roams to a new access point. However, in actual communication This re-authentication process is not necessary

Although this method can solve the requirement of fast switching on the coverage of access points, it cannot provide complete forward security, that is, if the current access point is a fake access point, since the authentication process does not go through the authentication server, it will directly Affects the security of the master key of the next new target access point, and cannot guarantee the security of the mobile station switching access point process; in addition, because the authentication process does not go through the authentication server, in order to further ensure that the current access point is the same as its neighbor access point To negotiate the security of the backup master key between access points, the existing key generation structure must be modified, which increases the complexity of identity authentication and key agreement design between access points

Images