无线城域网络安全架构及其认证方法研究

阐述了无线城域网络的安全威胁和安全需求,介绍了IEEE 802.16标准中的安全机制,尤其是2005年底发布的IEEE 802.16 e标准的安全架构。重点研究了可扩展认证协议EAP,对EAP的认证过程做了比较全面地探讨。深入研究了由3GPP组织开发的EAP-SIM和EAP-AKA认证方法,对其身份管理、认证流程和安全性能等若干方面做出了详细地分析。EAP-SIM和EAP-AKA认证方法有足够的安全性,适合于无线城域网络安全认证的需求。

Research on Security Architecture and Authentication Methods for Wireless Metropolitan Area Network

The security threat and the security requirement of the wireless metropolitan area network(WMAN) are described.The security mechanism in the standard IEEE802.16 is then introduced,especially the security authentication architecture in IEEE802.16e-2005.The extensible authentication protocol(EAP) is investigated and the authentication procedure is discussed comprehensively.The EAP-SIM and EAP-AKA authentication methods developed by 3GPP organization are investigated thoroughly.A detail analysis of the identity management,the authentication procedure and the security performance are analyzed in detail.It can be concluded that the EAP-SIM and EAP-AKA authentication methods possess the sufficient security performance and can meet the requirements for security authentication of WMAN.