一种无线局域网多安全域间的密钥共识协议

Multi-domain key agreement protocol for WLAN

在无线局域网中,不同管理机构下移动用户和认证服务器构成的安全域不同,如果一个安全域的用户需要访问其他安全域时,用户与异地安全域的密钥共识是一个有待解决的安全问题。提出了一种多安全域间的密钥共识协议MKAP,该协议可以解决跨安全域访问时本地安全域的认证服务器与异地安全域认证服务器间的密钥共识以及移动用户与异地安全域的密钥共识,MKAP将跨安全域访问按基于本地的跨域访问和基于移动IP跨域访问两种情形分别提出了解决方案。

In WLAN, different wireless users and authentication severs constitute different secure domain under different management institutions. If a wireless user in a secure domain wants to access another secure domain, the key exchange between the wireless user and visitor authentication severs is an unsolved problem. MKAP（Multi-domain Key Agreement Protocol） was proposed to solve the key agreement in authentication server between local and remote secure realms. MKAP made solutions to the two types of cross secure realm access respectively： one is based on local cross realm access and the other is based on mobile IP cross realm.