校园一卡通无线数据采集系统的WPKI架构设计

WPKI architecture design of campus card wireless data acquisition system

为解决无线网络的数据传输安全问题,文章将以WAP网关为桥梁,设计一种基于无线数据采集系统的WPKI安全框架,首先,根据无线和有线网络异构认证体系互通的需求,分别采用WTLS握手协议、SSL密码协议建构双层加密机制,并针对其协议转换中存在的安全漏洞问题,选用透明网关模型,融合密钥交换和口令认证,采用基于ECDH密钥交换算法的PAKE协议,通过双方身份的认证,无线数据采集网络与校内网的接入。最后,经由OPNET仿真分析,该WPKI架构在安全会话建立的时间、无线信道利用率、队列延迟等方面均存在明显的应用优势。

In order to solve the problem of data transmission security in wireless networks,a WPKI security framework based on wireless data acquisition system is designed by using WAP gateway as a bridge.Firstly,according to the requirements of heterogeneous authentication systems in wireless and wired networks,WTLS handshake protocol and SSL cryptographic protocol are used to construct two-tier encryption mechanism,and the security loopholes in protocol conversion are addressed.To solve this problem,a transparent gateway model is chosen,which integrates key exchange and password authentication.The PAKE protocol based on ECDH key exchange algorithm is adopted to access the wireless data acquisition network and campus network through identity authentication of both sides.Finally,through OPNET simulation analysis,the WPKI architecture has obvious application advantages in the time of secure session establishment,wireless channel utilization,queue delay and so on.