臺灣博碩士論文加值系統

目前IEEE 802.11i標準已在無線網路中提出多個安全且快速換手認證的協定方法。為了達到安全性，透過可信的認證伺服器線上輔助行動設備與基地台之間完成交互認證(Mutual Authentication)。然而，每次換手認證皆需要認證伺服器線上的輔助將導致嚴重影響效能的認證延遲。因此，本論文保留802.11i快速換手認證方法之安全性，提出一個植基於認證票的快速認證換手機制，允釵瘞妘]備利用認證票直接與基地台完成交互認證，無須認證伺服器的線上輔助，達到快速換手認證之目的。

IEEE 802.11i standard and many fast handoff authentication protocols have been proposed. For the security purpose, the trusted authentication server is required to on-line assist in mutual authentication between the wireless device and the visited access point. However, the authentication server is required to on-line assist in the mutual authentication, which leads to serious authentication delays. Therefore, in this paper, we shall to propose a new lightweight ticket that has fast handoff method for 802.11i secure wireless network. Compared with other existing protocols, our protocol dose not touch authentication server in roam to new access point, meanwhile has low computation cost. This protocol is not only simple and quick but can also secure from various known attacks. Therefore, we believe that it is more suitable for in secure wireless network environment.

摘 要 1
Abstract 2
誌 謝 3
目 錄 5
圖目錄 7
第一章、導論 8
1.1前言 8
1.2各章摘要 10
第二章、相關研究背景 11
2.1三層式無線網路架構 11
2.2換手Handoff/Handover 12
2.3 802.1X與RADIUS協定 13
2.4擴展認證協定EAP 14
2.5 PMK金鑰 15
2.6 IEEE 802.1X/EAP-TLS標準協定 16
第三章、提出的方法 22
3.1 初次認證 23
3.2 換手認證 26
第四章、分析與討論 30
4.1 安全性分析 30
4.2 效能分析 33
第五章、結論 36
參考文獻 37
作者簡介 39

[1]B. Aboba, L. Blunk, J. Vollbrecht, J. Carlson, and H. Levkowetz, “Extensible Authentication Protocol (EAP),” RFC 3748, Jun. 2004.
[2]B. Aboba and D. Somon, “PPP EAP TLS Authentication Protocol,” RFC 2246, Oct. 1999.
[3]T. Dierks and C. Allen, “The TLS Protocol Version 1.0,” RFC 2246, Jan. 1999.
[4]C. He and J.C. Mishell, “Analysis of the 802.11i 4-Way Handshake,” Proceedings of the 3rd ACM Workshop on Wireless Security, Philadelphia, USA, pp. 43-50, Oct. 2004.
[5]IEEE Standard 802.11i, “Wireless Medium Access Control (MAC) and Physical Layer (PHY) Specifications: Medium Access Control (MAC) Security Enhancements,” Jul. 2003.
[6]IEEE Standard 802.1X, “IEEE Standard for Local and Metropolitan Area Networks, Port-Based Network Access Control,” Oct. 2001.
[7]R.H. Jan and Y.C. Huang, “Fast Pre-Authentication Based on IEEE 802.11i,” in Proceedings of the 2nd Workshop on Wireless, Ad Hoc, and Sensor Networks, Taoyuan, Taiwan, pp. 317-324. Aug. 2006.
[8]L. Maccari, R. Fantacci, T. Pecorella, and F. Frosali, “Secure, Fast Handhoff Techniques for 802.1X Based Wireless Network,” Proceedings of the IEEE International Conference on Communications, pp. 3917-3922, Jun. 2006.
[9]A. Mishra, M. Shin, and W. Arbaugh, “An Empirical Analysis of the IEEE 802.11 MAC Layer Handoff Process,” ACM SIGCOMM Computer Communication Review, Vol. 33, No. 2, pp. 93-102, Apr. 2003.
[10] OpenSSL Project, http://www.openssl.org, 2007.
[11] C. Rigney, S. Willens, A. Rubens, and W. Simpson, “Remote Authentication Dial in User Service (RADIUS),” RFC 2865, Jun. 2000.
[12] W. Stallings, Cryptography and Network Security - Principles and Practices, Third Edition, May 2004.
[13] X. Zheng, C. Chen, C.T. Huang, M.M. Matthews, and N. Santhapuri, “A Dual Authentication Protocol for IEEE 802.11 Wireless LANs,” in Proceedings of the 2nd Wireless Communication Systems, pp. 565-569, Sep. 2005.