Patent ID: 8417951
Filing Date: 2013-04-09
Classification: H04L,H04W

Abstract:
1. A Wireless Local Area Network (WPAN) Authentication and Privacy Infrastructure (WAPI)-based authentication method for roaming, comprising the steps of: initiating a WAPI security mechanism between the terminal and a wireless access point by associating the terminal with the wireless access point to initiate a WAPI authentication process; receiving, by a foreign-authentication server which the terminal accesses, a certificate authentication request packet from the wireless access point; and determines from information on a certificate of the terminal that the terminal has a roaming access, searching for, by the foreign-authentication server, a trusted home-authentication server in a local trusted list of foreign-authentication servers according to information on the trusted home-authentication server in the certificate of the terminal; transmitting, by the foreign-authentication server, a certificate-authentication-for-roaming request packet to the trusted home-authentication server if the trusted home-authentication server is found; transmitting, by the foreign-authentication server, a certificate-authentication-for-roaming request packet to an upper central root-authentication server if the trusted home-authentication server is not found; receiving, by the home-authentication server, the certificate-authentication-for-roaming request packet, verifying the certificate of the terminal for legality, and returning a certificate-authentication-for-roaming response packet; or, receiving, by the root-authentication server, the certificate-authentication-for-roaming request packet, and transmitting the certificate-authentication-for-roaming request packet to an appropriate authentication server according to information on the trusted home-authentication server in the certificate-authentication-for-roaming request packet; on receiving the certificate-authentication-for-roaming response packet, reconstructing, by the root-authentication server, a message authentication field in the certificate-authentication-for-roaming response packet according to information on the authentication server in the access domain in the certificate-authentication-for-roaming response packet, and transmitting the reconstructed certificate-authentication-for-roaming response packet to an appropriate authentication server; receiving, by the foreign-authentication server, the certificate-authentication-for-roaming response packet, parsing the certificate-authentication-for-roaming response packet, and returning a certificate authentication response packet to the wireless access point; and performing, by the wireless access point and the terminal, an access control according to a certificate authentication result provided in the returned certificate authenticate response packet, wherein the foreign-authentication server returns the certificate authentication response packet to the wireless access point in a format defined in the national standards for WLAN.