摘要： EAP-AKA协议可以实现用户和3G网络的双向认证，但缺乏对无线局域网(WLAN)接入网络的认证和用户主密钥的更新机制，并且3G用户在WLAN间漫游时代价较高。针对上述问题，利用身份加密技术和门票技术改进EAP-AKA协议，设计无需3G网络参与的WLAN间快速漫游协议，实现对WLAN接入网络的认证和主密钥更新。

关键词: 基于身份加密, EAP-AKA协议, 无线局域网, 3G用户, 漫游认证

Abstract: EAP-AKA protocol can realize bidirectional authentication between 3G users and 3G network, but it lacks authentication for Wireless Local Area Networks(WLANs) and updating scheme for user master key, and the cost of roaming among WLANs is relatively higher. Aiming at such problems, this paper designs a fast authentication roaming protocol without participation of 3G network, in which ID-based encryption and ticket technology is utilized to implement master key updating and access network authentication.

Key words: ID-based encryption, EAP-AKA protocol, Wireless Local Area Networks(WLANs), 3G user, roaming authentication

中图分类号: 

• TP393.08