应用于IEEE802.1x的可扩展认证协议的安全分析

IEEE802．1x协议是对现行lEEE802．11协议的安全补充，lEEE委员会为IEEE802．11推出了一个安全架构，称之为RSN(Robust Security Network)。RSN利用IEEE802.lx标准来实现访问控制、认证以及密钥的管理。可扩展认证协议(EAP)是IEEE802．1x中引入的一个重要协议，该标准为基于802标准的局域网提供了一个认证的框架。文章对EAP在应用中所遇到的问题和安全隐患进行分析，并对这些问题提出了可能的解决方案。

Security Analysis of Extensible Authentication Protocol in IEEE802.1x

IEEE802.1x standard is a secure supplement for the current IEEE802.11 standard. But the IEEE group has proposed a security architecture, which they call the robust security network (RSN). The RSN utilizes the IEEE802.1x standard as a basis for access control, authentication, and key management. Extensible authentication protocol is an important standard to IEEE802.1x standard. The protocol provides an authentication framework for local network based on 802 standard. This paper analyzes some problems in the application of EAP and provides some possible solutions.