【作者】 陈伟；

【导师】 丁秋林；

【作者基本信息】 南京航空航天大学 ， 计算机应用技术， 2006， 硕士

【摘要】 随着信息技术的快速发展,网络应用已经在全球得以推广。无线局域网结合了无线通信技术和计算机网络的优势,实现在一定范围内的无线网络通信。对于无线局域网,安全是一个非常重要的课题。同时由于无线局域网发展迅速,各种协议和标准也在不断完善中,对无线局域网安全问题的探讨将会一直持续下去。本文的研究主要针对无线局域网的接入认证过程。首先分析了无线局域网安全处理方法中的缺陷和不足,采用接入认证机制来提高它的安全性。比较了现有主要接入认证技术,选用较完善的802.1x作为接入认证框架。提出嵌入式认证系统的体系结构,该嵌入式认证系统采用ARM芯片作为硬件平台,类Linux的嵌入式操作系统ucLinux为软件平台,在该平台上实现了基于802.1x协议框架的EAP扩展认证协议。另外,为了进一步提高WLAN的安全,采用IP+MAC的地址过滤机制来实现系统对端口的控制,用单向加密算法加密传送用户密码。同时,为了提高授权信息的检索效率,本文采用了缓存机制。采用本文提出的设计方案的嵌入式认证系统能够避免主要的安全威胁,有效的保护了WLAN的安全。更多还原

【Abstract】 With the rapid development of the computer technology, network application is being widely applied to daily life. The wireless LAN uses the advantages of both wireless communication technology and network to carry out the wireless communication with network in a certain distance. For wireless network, the security is very important. WLAN is in the period of rapid development, many standards and protocols are being improved to enhance securities. The discussion of the security on WLAN will be on.The paper research the access authentication procedure of the WLAN. At the beginning of the paper, the deficiency of the WLAN’s basic security policy is analyzed,so the access authentication is proposed to enhance its security. Several present access authentication technologies are compared, the 802.1x is selected to act as the authentication protocol framework because it is considered to be better. Then the embedded authentication system is put forward. This system use the ARM as the hardware platform and the ucLinux as the operation system, the extend authentication protocol based on 802.1x is implemented on this environment. In addition, to advance the WLAN’s security, the IP+MAC data filtrate method is introduced to control the port; the encryption technologies are adopted to protect the user’s password. Meanwhile, cache mechanism is brought forward to improve the query efficiency on the authentication information. The analysis indicates that embedded authentication system can protect the WLAN from main safety threats effectively.更多还原