Patent ID: 8533461
Filing Date: 2013-09-10
Classification: H04L,H04W

Abstract:
1. A method for pre-authenticating a wireless local area network terminal, comprising: after a current access point (AP) which has set up security association with a station (STA) receiving a pre-authentication start packet sent by said STA, the current AP interacting with a destination AP to verify certificates of the current AP and the destination AP for each other, wherein said current AP and destination AP adopt the following way to verify certificates thereof for each other: said current AP sends a pre-authentication initiation packet to said destination AP, and said pre-authentication initiation packet includes a certificate of said current AP and a signature of said current AP; after receiving said pre-authentication initiation packet, said destination AP verifies the signature of said current AP, and after the verification is successful, the destination AP sends a certificate authentication request packet to an authentication server, and said certificate authentication request packet includes the certificate of said current AP, the certificate of said destination AP and a signature of said destination AP; and after receiving the certificate authentication request packet, said authentication server verifies the signature of said destination AP, and after the signature is verified successfully, the authentication server verifies the certificates of said current AP and said destination AP, and sending a certificate authentication response packet including certificate verification results and a signature of said authentication server to said destination AP and the current AP; and if a certificate of said destination AP is verified to be valid, said current AP sending key information of the security association set up with said STA by said current AP to said destination AP, and said destination AP saving said key information; wherein said key information includes a basic key generated by negotiation between said STA and said current AP.