一种WLAN&nbsp;Mesh网络快速切换认证方法

彭清泉; 裴庆祺; 庞辽军; 马建峰

doi:10.3969/j.issn.1671-7775.2010.04.018

PDF(409 KB)

江苏大学学报（自然科学版） ›› 2010, Vol. 31 ›› Issue (4) : 458-463. DOI: 10.3969/j.issn.1671-7775.2010.04.018

论文

一种WLAN Mesh网络快速切换认证方法

作者信息 +

An authentication method for fast handoff in WLAN mesh networks

Author information +

文章历史 +

摘要

针对WLAN Mesh网络中Mesh接入点（MAP）移动时快速切换认证过程中存在的安全问题,采用基于邻居图的快速切换方法和基于矩阵的密钥预分配方法,提出一种快速切换认证方案,该方案能够适应具有移动MAP的WLAN Mesh网络场景.利用Canetti-Krawczyk模型对提出的认证方案进行安全性分析,并对方案中所需的计算和存储代价进行估计.结果表明,在伪随机函数和消息认证码函数是安全的前提下,方案中的认证协议在UM中是SK-安全的,且该方案具有较小的计算和存储代价

Abstract

The security problem of fast handoffs in WLAN mesh networks with mobile mesh access point （MAP） was analyzed. Based on the neighbor graph fast handover method and matrix-based key pre-distribution scheme, an authentication scheme for fast handoff was proposed. The scheme is suitable to the WLAN mesh networks with mobile MAP. Based on Canetti - Krawczyk model, the improved d - way handshake protocol in the scheme was analyzed. And computation overhead and memory cost were evaluated. The results show that it is SK - secure in UM if the pseudorandom function and MAC function in use are secure against chosen message attacks. The performance shows that the proposed scheme has less computation overhead and memory cost.

导出引用

彭清泉, 裴庆祺, 庞辽军, 等. 一种WLAN Mesh网络快速切换认证方法[J]. 江苏大学学报（自然科学版）, 2010, 31(4): 458-463 https://doi.org/10.3969/j.issn.1671-7775.2010.04.018

Peng Qingquan, Pei Qingqi, Pang Liaojun, et al. An authentication method for fast handoff in WLAN mesh networks[J]. Journal of Jiangsu University(Natural Science Edition), 2010, 31(4): 458-463 https://doi.org/10.3969/j.issn.1671-7775.2010.04.018

参考文献

[1]Mishra A,Shin M H,Petroni N L,et al.Proactive key distribution using neighbor graphs[J].IEEE Wireless Communications,2004,11 (1):26-36.
[2]Pack S,Jung H,Kwon T,et al.SNC:a selective neighbor caching scheme for fast handoff in IEEE 802.11 wireless networks[J].ACM Mobile Computing and Communications Review,2005,9 (4):39-49.
[3]IEEE Standard 802.11r.Part 11:Wireless LAN Medium Access Control (MAC) and Physical Layer(PHY) Specifications,Amendment 2:Fast Basic Service Set(BSS) Transition[S].Piscataway:IEEE Computer Society,2005.
[4]Hur J,Park C,Yoon H.An efficient pre-authentication scheme for IEEE 802.11-based vehicular networks[C] ∥Proceedings of Advances in Information and Computer Security-Second International Workshop on Security 2007.Germany:Springer Verlag,2007:121-136.
[5]Komarova M,Riguidel M,Hecker A.Fast re-authentication protocol for inter-domain roaming[C] ∥Procee-dings of the 18th Annual IEEE International Symposium on Personal,Indoor and Mobile Radio Communications.Piscataway:IEEE,2007:1-5.
[6]Li C S,Tseng Y C,Chao H C,et al.A neighbor ca-ching mechanism for handoff in IEEE 802.11 wireless networks[J].Journal of Supercomputing,2008,45 (1):1-14.
[7]Kassab M,Bonnin J M,Belghith A.Fast and Secure handover in WLANs:an evaluation of the signaling overhead[C] ∥Proceedings of 5th IEEE Consumer Communications and Networking Conference.Piscataway:IEEE Computer Society,2008:770-775.
[8]Du W L,Deng J,Han Y,et al.A pairwise key pre-distribution scheme for wireless sensor networks[C] ∥Proceedings of 10th ACM Conference on Computer and Communications Security.New York:Association for Computing Machinery,2003:42-51.
[9]Canetti R,Krawczyk H.Analysis of key-exchange protocol and their use for building secure channels[C] ∥Proceedings of Eurocrypt′01,LNCS 2045.New York:Springer Verlag,2001:453-474.
[10]Zhang F,Ma J F,Moon S.The security proof of a 4-way handshake protocol in IEEE 802.11i[C] ∥Proceedings of International Conference on Computational Intelligence and Security,LNCS 3802.New York:Sprin-ger Verlag,2005:488-493.