In this paper, the current known attack methods against WAI and the improvements of WAI called WAI' were analyzed. Through analyzing the unicast key agreement protocol in the WAI' by CPN model, the vulnerabili...In this paper, the current known attack methods against WAI and the improvements of WAI called WAI' were analyzed. Through analyzing the unicast key agreement protocol in the WAI' by CPN model, the vulnerabilities of WAI' were found out. The improvement of WAI' was made and a new protocol called WAI'-E was proposed. The WAI'-E was combined with the key exchange mechanism of Diffie-Hellman based on elliptic curve cryptography. Moreover, by using CK mode, it is the fact that WAI'-E was SK-secure with PFS and was provided with independent security of certificate authentication was proved.展开更多
无线局域网(Local Area Network,LAN)是一种部署方便的高速无线接入技术,能够利用各种信息传输网络进行实时监控、远程定位、历史记录、智能故障分析及预警等安全服务,面向物联网内的所有对象通过云系统进行监控、管理、分析和处理。基...无线局域网(Local Area Network,LAN)是一种部署方便的高速无线接入技术,能够利用各种信息传输网络进行实时监控、远程定位、历史记录、智能故障分析及预警等安全服务,面向物联网内的所有对象通过云系统进行监控、管理、分析和处理。基于互联网探讨基于无线局域网鉴别和保密基础结构(Wireless LAN Authentication and Privacy Infrastructure,WAPI)的无线网络接入终端的设计,对WAPI国家安全标准进行详细的分析和阐述,并基于WAPI技术的信息交换机制和保密结构阐述其安全通信功能,从无线网络接入终端的总体设计、硬件设计和软件设计等不同层面入手,搭建基于WAPI的无线网络接入终端系统,确保系统的安全性和稳定性。展开更多
文摘In this paper, the current known attack methods against WAI and the improvements of WAI called WAI' were analyzed. Through analyzing the unicast key agreement protocol in the WAI' by CPN model, the vulnerabilities of WAI' were found out. The improvement of WAI' was made and a new protocol called WAI'-E was proposed. The WAI'-E was combined with the key exchange mechanism of Diffie-Hellman based on elliptic curve cryptography. Moreover, by using CK mode, it is the fact that WAI'-E was SK-secure with PFS and was provided with independent security of certificate authentication was proved.
文摘无线局域网(Local Area Network,LAN)是一种部署方便的高速无线接入技术,能够利用各种信息传输网络进行实时监控、远程定位、历史记录、智能故障分析及预警等安全服务,面向物联网内的所有对象通过云系统进行监控、管理、分析和处理。基于互联网探讨基于无线局域网鉴别和保密基础结构(Wireless LAN Authentication and Privacy Infrastructure,WAPI)的无线网络接入终端的设计,对WAPI国家安全标准进行详细的分析和阐述,并基于WAPI技术的信息交换机制和保密结构阐述其安全通信功能,从无线网络接入终端的总体设计、硬件设计和软件设计等不同层面入手,搭建基于WAPI的无线网络接入终端系统,确保系统的安全性和稳定性。
基金The National Basic Research Program of China(973Program) (No.G1999035805)the Natural Science Foundation of ShannxiProvince (No.2007F37)China Postdoctoral Science Foundation (No.20060401008,20070410376).
