【作者】 张子彬；

【导师】 冯涛；

【作者基本信息】 兰州理工大学 ， 计算机软件与理论， 2010， 硕士

【摘要】 由于无线传输信道的开放性,任何具有接收能力的设备都可以随时对网络进行窃听,因此,无线网络与有线网络相比较更容易遭受窃听、非法访问等网络攻击。安全认证协议作为整个无线网络安全接入系统的基础保障,一旦遭受攻击,则将使整个安全系统受到严重的威胁,不但合法客户站不能正常访问系统、提取信息,而且攻击者可以非法登录基站,进行信息窃取、信息破坏,威胁整个无线网络安全。由此可见,安全认证协议在无线网络安全接入系统中的地位是十分关键和极其重要的。WiMAX无线网络作为一种无线城域网技术,它主要是解决点到多点条件下的空中接口标准问题,它能向固定、携带、游牧和高速移动的设备提供宽带无线连接,以及在“最后一英里”宽带接入领域可以作为一些现有技术的无线替代品。复杂的网络应用环境就要求WiMAX无线网络安全接入技术具有较为良好的安全性,而且作为WiMAX无线网络安全接入技术的关键,WiMAX无线网络安全认证协议的安全性保证愈发显得更加重要。目前,对于WiMAX无线网络安全认证协议的安全性研究虽然取得了一定的成果,但是还是缺乏在一个安全框架下进行安全认证协议的设计,进而进行形式化分析与证明的研究。为了有效应对WiMAX无线网络安全接入所面临的威胁,本文着眼于运用DDMP组合理论建立一种更加安全的适合WiMAX无线网络的安全认证协议。本文在对WiMAX无线网络安全接入技术和DDMP组合理论进行深入研究和分析的基础上,重点对WiMAX无线网络安全认证协议进行了研究。在WiMAX无线网络安全认证协议的发展过程中,David Johnston为IEEE802.16e标准提出的PKMv2安全认证协议草案(DJ-PKMV2)对于IEEE802.16e-2005标准最后的制定起到了至关重要的作用。本文通过DDMP组合理论的协议演绎系统(PCL)对DJ-PKMv2安全认证协议进行了形式化分析,发现DJ-PKMv2安全认证协议存在交错攻击。之后基于DJ-PKMv2安全认证协议的基础构件,运用协议演绎系统(PDS)演绎设计了一种新的WiMAX无线网络安全认证协议,并且使用协议组合逻辑(PCL)给出了新协议的模块化正确性和安全性证明。新设计的FZM-PKMv2安全认证协议具有良好的密钥机密性和会话认证性,可以有效防御Lowe’s攻击、交错攻击等网络攻击,与现有PKMv2安全认证协议版本相比更加适合WiMAX无线网络复杂的网络应用环境。更多还原

【Abstract】 The openness of transmission channel enables the eavesdropping to the internet of any devices with reception ability. Thus,wireless network suffers from eavesdropping and illegal network attack comparatively more than wireline network. As the foundations for secured wireless access the security authentication protocol will threaten the whole security system once it gets attacked.The legal customers won’t be able to access the system and to extract information and the attackers could unfortunately login the base stations illegally to steal information and to destroy them even, thus jeopardizing the security of the whole network. Therefore, the security authentication protocol plays a very critical role in wireless network secured access system.The WiMAX wireless network as one of the wireless metropolitan area network technologies,It mainly solves the air interface standard problem under the point-multipoint condition, it could provide stationary, portable,mobile and high speed device with broadband wireless connection and could be wireless substitute of current last-mile broadband access technologies.The complicate network application environment requires high security of the WiMAX wireless secured access network as a key point for WiMAX wireless network secured access technologies.The security promise of WiMAX wireless network authentication protocol is becoming more and more important.Research progress on WiMAX wireless network authentication protocol has been made, but it lacks the method of design a new authentication protocol and present a formal correctness and security proof of the new protocol under a security framework.In this paper, in order to effectively face the threaten of WiMAX Wireless Network Access Security Technology, we use the DDMP composition theory to derivate a new authentication protocol in WiMAX wireless network. Based on the research of WiMAX Wireless Network Access Security Technology and DDMP composition theory, we mainly analyzed the authentication protocol of WiMAX Wireless Network.In the history of development of WiMAX wireless security authentication,the draft of PKMv2 security authentication (DJ-PKMV2) for 802.16e provided by David Johnston plays a vital role in the final formulation of standard IEEE 802.16e-2005. In this paper, we used the Protocol Composition Logic (PCL) to analyze the DJ-PKMv2 authentication protocol’s security and to detect interleaving attack. Based on the DJ-PKMv2 authentication protocol’s component,we used the Protocol Derivation System (PDS)to derivate a new authentication protocol(FZM-PKMv2) in WiMAX wireless network based on the vulnerability of system security. Finally we presented a formal correctness and security proof with Protocol Composition Logic(PCL).FZM-PKMv2 authentication protocol has key secrecy and session authentication, it can defend the Lowe’s attack、the interleaving attack and so on. Compared with other PKMv2 security authentication protocol this new protocol is more suitable for complicate wireless network application environment used in WiMAX.更多还原