Key agreement method in WAPI authentication mechanism

Abstract

The invention discloses a secret key consulting method in the attestation mechanism of WAPI, solving the problems of ID attestation and secret key consultation of mobile equipment accessing to wireless local-area network. The method arranges three messages: request, response and answer of secret key and their interchanging course: a client-end STA generates a random number r0, encrypts the r0 by the public key of an access point AP and then sends the encrypted r0 and a conversation indication sign s to the AP; the AP decrypts to obtain the r0, selects the other random number r1, and calculates conversation secret key and message attestation code and sends the message attestation code, the indication sign s and the r1 encrypted by public key of the STA; the STA decrypts to obtain the r1 and attests the message attestation code transmitted from the AP to determine to access to the network and output conversation secret key; finally, the STA calculates the other message attestation code and sends it and s together to the AP; the AP attests the message attestation code transmitted by the STA and then outputs conversation secret key and allows the STA to access to the network. The method achieves universal combinable safety strength and implements ID attestation and secret key consultation, able to be used in improving the attestation mechanism in the WAPI.

Description

technical field [0001] The invention belongs to the technical field of wireless communication, and relates to the security technology of wireless local area network, in particular to a key negotiation method of authentication mechanism in WAPI to solve the identity authentication and key negotiation problems when mobile equipment accesses the wireless local area network. Background technique [0002] In 2003, the China Intellectual Property Office announced the patent application (publication number: CN 1426200A) of "Safe Access of Mobile Terminals in Wireless Local Area Network and Data Security Communication Method of Wireless Links". The patents involved in this application are applied in China's wireless local area network national standard GB15629.11-Wireless Local Area Network Authentication and Security Infrastructure WAPI, where the wireless LAN authentication infrastructure is called WAI for short. WAI adopts a port-based authentication model similar to the IEEE 802...

AI Technical Summary

Problems solved by technology

[0021] The purpose of the present invention is to overcome the above-mentioned shortcoming of WAI, provide a kind of key agreement method in the WAPI authentication mechanism without changing the original WAI basic frame, to solve key agreement and identity authentication problem in WAPI, further improve the efficiency of WAPI authentication mechanism security strength

Images