基于802.1X/EAP-PEAP的个性化接入认证机制研究

Personalization Access Authentication Mechanism Based on 802.1X/EAP-PEAP

研究了在人们对网络依赖程度越来越高、网络安全问题不断涌现以及用户多台移动终端需要同时访问网络的情况下建立便捷高效的个性化接入认证机制的问题.基于IEEE802.1X标准,使用请求者系统、认证系统和认证服务器系统的三方架构,分析了EAP协议,对EAP-MD5、EAP-TLS、EAP-SIM、EAP-PEAP四类认证方法做了比较,并根据需要选择EAP-PEAP认证方法.然后在了EAP-PEAP标准的基础上设计了详细的认证流程,从系统和用户两个角度实现了个性化的接入认证机制.

This paper studied a convenient and efficient network situations personalized access authentication mechanisms. It uses the tripartite framework of requester, authenticator and authentication server based on IEEE802.1X standards. It analyzes the EAP protocol, compares the EAP-MD5, EAP-TLS, EAP-SIM, EAP-PEAP and chooses the EAP-PEAP authentication method. Then it gives the detailed design of the authentication process with system and user personalization.