Search International and National Patent Collections

1. (WO2017020530) ENHANCED WLAN CERTIFICATE AUTHENTICATION METHOD, DEVICE AND SYSTEM

Pub. No.:    WO/2017/020530    International Application No.:    PCT/CN2015/100247
Publication Date: Fri Feb 10 00:59:59 CET 2017 International Filing Date: Fri Jan 01 00:59:59 CET 2016
IPC: H04L 9/32
Applicants: YULONG COMPUTER TELECOMMUNICATION SCIENTIFIC (SHENZHEN) CO., LTD.
宇龙计算机通信科技(深圳)有限公司
Inventors: QIN, Yan
秦严
Title: ENHANCED WLAN CERTIFICATE AUTHENTICATION METHOD, DEVICE AND SYSTEM
Abstract:
An embodiment of the present invention discloses an enhanced wireless local area network (WLAN) certificate authentication method. The method comprises: sending, by an AP, to an STA an authentication activation message to trigger the STA to perform identity verification for the AP, wherein the authentication activation message carries an AP certificate and first AP signature information; receiving, by the AP, an access authentication request message sent by the STA after the identity verification of the AP, and performing, according to a public key of the STA and the access authentication request message, identity verification for the STA; and if the AP verifies that an STA identity corresponding to STA signature information matches an STA certificate, and the STA certificate is valid, then sending a certificate authentication request message to an AS to trigger the AS to perform two-way certificate authentication. The present technical solution can add an identity verification function between an STA and an AP before an AS performs two-way certificate authentication, thus ensuring the uniqueness and unforgeability of identities of an STA and AP, and improving security of a WLAN certificate authentication process.