基于IEEE 802.11i协议标准的WLAN电信级应用安全系统设计

摘要

Background of this WLAN network technology and the threat of possible risks, after analyzing the pros and cons of the current WLAN several commonly used authentication methods, and fi nally proposes a more secure and have workable solutions, namely IEEE 802.11i- 2004 international standard as the core, at IEEE802.11i standard framework, using 802.1X / EAP way to achieve strong joint security network strong authentication, identity authentication, based AES algorithm (FIPS PUB 197-2001) of CCMP data confi dentiality and integrity protection.%本文从WLAN技术的背景以及可能存在的风险威胁出发，通过分析当前WLAN的若干种常用认证方法的优劣，最后提出了一种较为安全并且具备可操作性的解决方案，即以IEEE 802.11i-2004国际标准为核心，在IEEE 802.11i标准框架下，采用802.1X/EAP方式实现强壮网络联合安全的强身份认证，完成身份认证后，使用基于AES算法（FIPS PUB 197-2001）的CCMP实现数据保密性与完整性保护。