【作者】 陈寿齐；

【导师】 曹秀英；

【作者基本信息】 东南大学 ， 通信与信息系统， 2005， 硕士

【摘要】 1990年无线局域网的出现,让人们一度以为完全取消电缆和线路连接方式的新时代即将来临。但是,事物的发展并不像预想的那么好,无线局域网的发展比较缓慢。安全漏洞是其不可忽略的一个影响因素。本文围绕GB15629.11无线局域网国家标准的安全接入技术展开研究,研究了基于GB15629.11无线局域网国家标准的安全理论和方法,对其安全架构、关联机制及各个功能模块进行了软件设计和实现。首先介绍了无线局域网的相关知识和相关标准,陈述由无线特性带来的安全问题。从体系结构、逻辑结构、服务定义以及具体帧的结构等角度深入探讨了GB15629.11国家标准,分析了无线站点STA接入网络的过程。其次分析了IEEE802.11标准既有的安全漏洞,介绍了旨在提高安全性能的GB15629.11国家标准的WAPI安全机制,这种安全机制由WAI和WPI两部份组成,WAI和WPI分别实现对用户身份的鉴别和对传输的数据加密,WAPI能为用户的WLAN提供全面的安全保护。然后介绍了WLAN的证书认证机制,着重介绍了PKI包含的技术、标准及体系结构和应用与发展。最后从细化无线站点STA一次接入无线局域网的流程开始,说明了实现仿真所包括的帧的定义,系统仿真图的设计,采用的核心技术,并给出了在Linux操作系统下STA和AP通过利用消息队列和共享内存实现通信的具体过程和使用openssl软件实现的证书颁发和吊销的一系列过程。更多还原

【Abstract】 Since WLAN (Wireless Local Area Network) first appeared in 1990, some people had thought that a new age without wired limitation was coming. But, for many reasons, such as security, WLAN has a slower development than expected. The research of this dissertation has emphasized on the secure access technology which based on the national standard GB15629.11. In this paper, theory and technique of security have been studied, the security architecture, association mechanism and components of which have been designed and realized by means of software.Firstly, the relative knowledge and standards of WLAN are introduced, the secure access technology base on the national standard GB15629.11 is discussed from system architecture, logic architecture, definition of serive and frame format, the method theoretically describes a whole process of some wireless station’s access to a WLAN.Secondly, a brief analysis about the shortcome in security of the IEEE802.11 standard has been given. The security mechanism of national standard GB15629.11 WAPI which is used to improve the security of WLAN is proposed. It is composed of WAI and WPI, WAI is used to authenticate the user’s idendity while WPI is focusing on data encryption. WAPI can provide the whole security protection for user’s WLAN system.Thirdly, the certificate authentication mechanism is introduced. Digital certificate has been studied, while the aspect about technology, standard, system structure, application and development has been emphased.Finally, the process of some wireless station’s accessing to WLAN is described particularly. The frame definition, system flowchart and kernel technology to realize the system simulation is introduced. The communication between STA and AP is implemented by using message queue and storage sharing in Linux Operating System. The process of certificate issued and revoked is implemented by using the openssl software.更多还原