Patent ID: 8312278
Filing Date: 2012-11-13
Classification: H04L,H04W

Abstract:
1. An access authentication method applicable to an Independent Basic Service Set (IBSS) network, comprising: step 1): configuring authentication roles of network entities; step 2): authenticating an authenticator and a supplicant after the authentication role configuration according to an authentication protocol; and step 3): performing key negotiation, by the authenticator and the supplicant, after the authentication is successfully completed, wherein a message integrity check field and a protocol synchronization lock field are added in a key negotiation message, wherein the protocol synchronization lock field includes a Key Negotiation Identifier KNID; wherein a KNID in a key negotiation request packet transmitted from the authenticator to the supplicant in an initial key negotiation protocol upon the successful authentication is a random number generated by the authenticator; wherein KNIDs in key updating processes are calculated respectively by the authenticator and the supplicant locally from a unicast key UK a Nonce wherein during a key updating process, verification of the key negotiation request packet by the supplicant further includes verification of the KNID; and wherein the KNIDs enable the authenticator and the supplicant to perform a synchronization function and prevent an attacker from forging and replaying the key negotiation request packet.