论文部分内容阅读
为了保证无线Mesh网络中移动客户端能够安全快速通过认证,提出了基于Diffie-Hellman算法的快速接入认证和切换认证两种方案。在接入认证方案中,Mesh客户端通过预分发的标签经4次握手完成首次接入认证后,计算用于切换认证的共享密钥,并将密钥预分发给切换的目标接入点。客户端在后续的移动过程中,利用共享密钥经3次握手完成双向认证,认证过程无需认证服务器的参与。对上述两种方案的安全性和性能代价进行了分析,结果表明新提出的两种认证方案的通讯代价和计算代价更小,具有认证时延短、认证效率高的优点,且在网络合法用户可信的前提下是安全的。
In order to ensure that mobile clients in wireless Mesh network can pass the authentication quickly and safely, two schemes of fast access authentication and handover authentication based on Diffie-Hellman algorithm are proposed. In the access authentication scheme, the Mesh client calculates the shared key used for switching authentication and forwards the key to the switched target access point after the pre-distributed label completes the first access authentication through 4-way handshake. During the subsequent mobile process, the client completes two-way authentication by using the shared key after three handshakes. The authentication process does not require the participation of the authentication server. The security and performance cost of the above two schemes are analyzed. The results show that the two proposed schemes have lower communication cost and less computational cost, have the advantages of short authentication delay and high authentication efficiency, Trusted under the premise of being safe.