IEEE802.1x/EAP-TLS认证协议的改进方案

An Improved Project for IEEE802.1x/EAP-TLS Authentication Protocol

无线局域网的安全性问题已日渐成为重要的研究问题,其中,认证机制是安全机制的重要内容。无线局域网采用IEEE802.1x认证协议。本文针对IEEE802.1x/EAP-TLS认证机制存在的安全缺陷,提出了协议的改进方案,在现有认证机制的基础上增加对客户端STA和接入点AP之间的双向认证,从而提高无线局域网的安全性。

Nowadays, it＇s very important to do the research on the security problem of WLAN. Among the security mechanism of WLAN, the authentication mechanism is an important part, and WLAN use IEEE 802.1x as its authentication protocol. By analyzing the defects of security in IEEE 802.1x/EAP-TLS, this thesis provides an improved schema for 802.1x by using the RADIUS to achieve the mutual authentication between the Supplicant and AP, and the security mechanism of WLAN has be improved.