FLAP: An Efficient WLAN Initial Access Authentication Protocol
FLAP: An Efficient WLAN Initial Access Authentication Protocol
复制标题
DOI：
10.1109/tpds.2013.68
复制
发表时间：
2014-02
影响因子：
5.3
通讯作者：
Xinghua Li;Fenye Bao;Shuxin Li-;Jianfeng Ma
中科院分区：
文献类型：
--
作者：
Xinghua Li;Fenye Bao;Shuxin Li-;Jianfeng Ma
如今，随着WLAN使能的移动的设备的快速增加和WLAN的更广泛使用，具有更有效的初始链路建立机制变得越来越重要，并且存在对比当前IEEE 802.11i更快的更快的接入认证方法的需求。本文通过实验观察到802.11i的认证延迟在某些场景下是无法容忍的，并指出导致这种低效率的主要原因是由于其从框架角度设计的，引入了太多的消息。为了克服这个缺点，我们提出了一个有效的初始接入认证协议，FLAP，它通过两个往返消息来实现认证和密钥分配。我们正式证明了我们的方案比四次握手协议更安全。实际测试结果表明，FLAP可以将EAP-TLS的效率提高94.7%。在不同的场景下进行了大量的仿真，结果表明，当WLAN变得拥挤的FLAP的优势变得更加突出。此外，还提出了一种简单实用的FLAP与802.11i兼容的方法。
Nowadays, with the rapid increase of WLAN-enabled mobile devices and the more widespread use of WLAN, it is increasingly important to have a more efficient initial link setup mechanism, and there is a demand for a faster access authentication method faster than the current IEEE 802.11i. In this paper, through experiments we observe that the authentication delay of 802.11i is intolerable under some scenarios, and we point that the main reason resulting in such inefficiency is due to its design from the framework perspective which introduces too many messages. To overcome this drawback, we propose an efficient initial access authentication protocol, FLAP, which realizes the authentications and key distribution through two roundtrip messages. We formally prove that our scheme is more secure than the four-way handshake protocol. Our practical measurement result indicates that FLAP can improve the efficiency of EAP-TLS by 94.7 percent. Extensive simulations are conducted in different scenarios, and the results demonstrate that when a WLAN gets crowded the advantage of FLAP becomes more salient. Furthermore, a simple and practical method is presented to make FLAP compatible with 802.11i.