Security analysis and implementation for wireless local area network access protocol via near field communication authentication

doi:10.11772/j.issn.1001-9081.2016.05.1236

Journal of Computer Applications ›› 2016, Vol. 36 ›› Issue (5): 1236-1245.DOI: 10.11772/j.issn.1001-9081.2016.05.1236

Previous Articles Next Articles

Security analysis and implementation for wireless local area network access protocol via near field communication authentication

LI Yun^1,2, CHEN Pangsen³, SUN Shanlin¹

1. College of Electronic Information and Automation, Guilin University of Aerospace Technology, Guilin Guangxi 541004, China;
2. College of Electronic Information Engineering, Tianjin University, Tianjin 300072, China;
3. College of Information and Communication, Guilin University of Electronic Technology, Guilin Guangxi 541004, China

Received:2015-09-23 Revised:2015-11-10 Online:2016-05-10 Published:2016-05-09
Supported by:
This work is partially supported by National Natural Science Foundation of China (61162003), the Natural Science Foundation of Guangxi (2015GXNSFAA139298), the Natural Science Foundation of Guilin University of Aerospace Technology (YJ1403).

基于近场通信认证的无线局域网无线接入协议的安全性设计

李云^1,2, 陈庞森³, 孙山林¹

1. 桂林航天工业学院电子信息与自动化学院, 广西桂林 541004;
2. 天津大学电子信息工程学院, 天津 300072;
3. 桂林电子科技大学信息与通信学院, 广西桂林 541004

通讯作者: 李云
作者简介:李云(1978-),女,广西南宁人,博士研究生,主要研究方向:水下传感网络、认知网络;陈庞森(1990-),男,四川内江人,硕士研究生,主要研究方向:移动通信系统;孙山林(1973-),男,河南邓州人,教授,博士,主要研究方向:无线通信系统、光微波通信系统。
基金资助:
国家自然科学基金资助项目(61162003);广西自然科学基金资助项目(2015GXNSFAA139298);桂林航天工业学院自然科学基金资助项目(YJ1403)。

Abstract

Abstract: Aiming at the problems existing in point-to-point communication model of Wireless Local Area Network (WLAN) protocol via Near Field Communication (NFC) authentication, such as plaintext transferring, user's anonymous access, data being easily tapped and tampered, a security design of WLAN protocol via NFC was put forward. The security tunnel was built using Diffie-Hellman key exchange algorithm and second generation Secure Hash Algorithm (SHA) to transfer the random information, and the user's anonymity was eliminated using Elliptic Curve Digital Signature Algorithm (ECDSA). A prototype implementation on computer was given from requirement analysis, architecture design and sequence steps of the protocol. The experimental results by using Colored Petri Net (CPN) modeling show that the proposed protocol can execute stably and deal with the unauthorized access and eavesdropping problems of WLAN.

Key words: Near Field Communication (NFC), Wireless Local Area Network (WLAN), Colored Petri Net (CPN), Elliptic Curve Digital Signature Algorithm (ECDSA)

摘要： 针对基于近场通信(NFC)认证的无线局域网(WLAN)无线接入协议点对点通信模式存在的问题,如明文传输、用户接入匿名性、数据易于被窃听、易于被篡改等,提出基于NFC认证的WLAN无线接入协议安全性的设计。该协议采用Diffie-Hellman密钥交换算法与第二代安全散列算法(SHA)建立安全隧道来完成随机信息的交换;采用椭圆曲线数字签名算法来消除用户的匿名性。从协议需求分析、架构设计与协议时序步骤三个方面入手,给出了一个计算机上的原型实现。通过有色Petri网(CPN)建模,实验仿真结果表明:基于NFC认证的WLAN接入协议对于无线局域网的非法接入攻击与窃听攻击有着良好的抵抗效果。

关键词: 近场通信, 无线局域网, 有色Petri网, 椭圆曲线数字签名算法

CLC Number:

TP393.08

LI Yun, CHEN Pangsen, SUN Shanlin. Security analysis and implementation for wireless local area network access protocol via near field communication authentication[J]. Journal of Computer Applications, 2016, 36(5): 1236-1245.

李云, 陈庞森, 孙山林. 基于近场通信认证的无线局域网无线接入协议的安全性设计[J]. 计算机应用, 2016, 36(5): 1236-1245.

References

[1] 李兴华, 尚昭辉, 杨丹, 等.利用无线物理层密钥增强802.11i的安全性[J].江苏大学学报(自然科学版), 2013, 34(4):416-421.(LI X H, SHANG Z H, YANG D, et al. Security enhancement of 802.11i by wireless physical layer key[J]. Journal of Jiangsu University (Natural Science Edition), 2013, 34(4):416-421.)
[2] 陈卓, 金豪, 张正文.一种无线局域网多安全域间的密钥共识协议[J].计算机应用, 2006, 26(9):2121-2123.(CHEN Z, JING H, ZHANG Z W. Multi-domain key agreement protocol for WLAN[J]. Journal of Computer Applications, 2006, 26(9):2121-2123.)
[3] 丰江帆, 王倩, 刘兆宏.无线局域网环境下的图书馆定位系统研究与实现[J].现代图书情报技术, 2012(4):79-83.(FENG J F, WANG Q, LIU Z H. Research and implement of library positioning system in wireless LAN environment[J]. New Technology of Library and Information Service, 2012(4):79-83.)
[4] 李勤, 张浩军, 杨峰, 等. 无线局域网安全协议的研究和实现[J]. 计算机应用, 2005, 25(1):160-162.(LIN Q, ZHANG H J, YANG F, et al. Study and implementation of security protocols for wireless local network[J]. Journal of Computer Applications, 2005, 25(1):160-162.)
[5] 刘永磊, 金志刚.无线局域网WPS安全性分析[J].计算机工程与应用, 2013, 49(21):87-89.(LIU Y L, JIN Z G. Analysis of WPS security in WLAN[J]. Computer Engineering and Applications, 2013, 49(21):87-89.)
[6] 刘安, 金志刚, 王颖.MACH:针对WLAN中WPS认证高速攻击方案[J].计算机应用研究, 2014, 31(8):2488-2496.(LIU A, JIN Z G, WANG Y. MACH:hight-speed cracking scheme to WPS authentication mechanism if WLAN[J]. Application Research of Computers, 2014, 31(8):2488-2496.)
[7] 吴国凤, 胡德启, 王培东.RC4算法引起的WEP协议安全性的研究与改进[J].合肥工业大学学报, 2012, 35(5):617-620.(WU G F, HU D Q, WANG P D. Research and improvement in the security of WEP protocol based on RC4 algorithm[J]. Journal of Hefei University of Technology, 2012, 35(5):617-620.)
[8] 刘永磊, 金志刚, 陈喆, 等.wpa/wpa2-psk高速暴力破解器的设计和实现[J].计算机工程, 2011, 37(10):125-127.(LIU Y L, JIN Z G, CHEN Z, et al. Design and implementation of high-speed brute forcer for wap/wap2-psk[J]. Computer Engineering, 2011, 37(10):125-127.)
[9] 周超, 周城, 郭亮.IEEE 802.1X的安全性分析及改进[J].计算机应用, 2011, 31(5):1265-1270.(ZHOU C, ZHOU C, GUO L. Security analysis and improvement of IEEE 802.1X[J]. Journal of Computer Applications, 2011, 31(5):1265-1270.)
[10] 王鹃, 唐西铭, 王勇, 等.一种基于手机令牌和NFC技术的身份认证系统[J].武汉大学学报(理学版), 2013, 59(5):403-410.(WANG J, TANG X M, WANG Y, et al. An identity authentication system based on mobile-token and NFC technology[J]. Journal of Wuhan University (Natural Science Edition), 2013, 59(5):403-410.)
[11] 孙权.一种基于NFC的安全非接触式跨行取款系统[J].计算机应用与软件, 2015, 32(8):76-79.(SUN Q. A secure contactless cross-bank ATM withdrawals system based on NFC[J]. Computer Applications and Software, 2015, 32(8):76-79.)
[12] ECMA. Near field communication-interface and protocol (NFCIP-1):ECMA 340-2004[S]. 2nd ed.[S. l.]:ECMA, 2004.
[13] HASELSTEINER E, BREITFUB K. Security in Near Field Communication (NFC)[EB/OL].[2010-10-10]. http://events.iaik.tugraz.at/RFIDSec06/Program/papers/002%20-%20Security%20in%20NFC.pdf.

[1]	SHI Jinshan, LI Ru, SONG Tingting. Blockchain-based access control framework for Internet of things [J]. Journal of Computer Applications, 2020, 40(4): 931-941.
[2]	XIA Haonan, DAI Shenghua. Security encryption of radio block center based on colored Petri net [J]. Journal of Computer Applications, 2018, 38(12): 3476-3480.
[3]	ZHANG Wei, SUN Tao, WAN Xiaoyun. Simplification method for testing behavior of parallel software [J]. Journal of Computer Applications, 2017, 37(5): 1276-1281.
[4]	WEI Chunling, WANG Bufei. Indoor activity-recognition based on received signal strength in WLAN [J]. Journal of Computer Applications, 2017, 37(5): 1326-1330.
[5]	WANG Xuqiao, WANG Jinkun. Integrated indoor positioning algorithm based on D-S evidence theory [J]. Journal of Computer Applications, 2017, 37(4): 1198-1201.
[6]	ZHANG Chengyu, WANG Rangding, YAO Ling, FU Songyin, ZUO Fuqiang, GAO Qifei, JIANG Ming. Near field communication-enabled water meter system with mobile payment [J]. Journal of Computer Applications, 2017, 37(1): 166-169.
[7]	WANG Jing, GAO Zehua, GAO Feng, PAN Xiang. Enhanced frequency-domain channel contention mechanism in wireless local area network [J]. Journal of Computer Applications, 2015, 35(2): 317-321.
[8]	YE Xiang XU Zhan HU Xiang LIU Dan. Low-cost mutual authenticate and encrypt scheme for active RIFD system [J]. Journal of Computer Applications, 2014, 34(2): 456-460.
[9]	DU Jiusheng CHEN Yijin HOU Zheng. Spatial query method for Kriging interpolation result [J]. Journal of Computer Applications, 2013, 33(03): 871-873.
[10]	. Intelligent fire-fighting vehicle model based on embedded system [J]. Journal of Computer Applications, 2010, 30(2): 560-563.
[11]	YU Li Yan-Tai SHU . Combining scheduling and congestion control for fair resource allocation in WLAN [J]. Journal of Computer Applications, 2009, 29(2): 487-490.
[12]	. Extension to DCF for wireless local area networks — ExDCF [J]. Journal of Computer Applications, 2008, 28(3): 564-567.
[13]	[英]Huifang Feng [中]冯慧芳 Yantai Shu 舒炎泰. Comparison research on prediction methods for WLAN traffic [J]. Journal of Computer Applications, 2008, 28(11): 2753-2755.
[14]	lee blake . Study on the fast handover performance of MIPv6 in 802.11 [J]. Journal of Computer Applications, 2008, 28(10): 2587-2589.

Security analysis and implementation for wireless local area network access protocol via near field communication authentication

基于近场通信认证的无线局域网无线接入协议的安全性设计

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 14

Recommended Articles

Metrics