一种基于HASH函数的EAP认证协议①

随着安全认证技术的发展，网络认证已成为保障网络安全的重要环节。当前被广泛使用的IEEE802．1X是建立在可扩展认证协议（EAP）基础上的一种认证框架。EAP提供了许多认证协议，每个认证协议都有自身的优缺点。有些没有提供用户名的保护，有些没有提供双向认证；有些部署较困难等。针对上述缺陷，提出了一种基于哈希函数的认证协议。阐述了该协议的具体认证过程，并对其进行了安全性分析，最后与当前一些认证协议作了比较。

A Hash-Based EAP Authentication Protocol

With the development of secure authentication technologies, network authentication has already become an important approach to protect network security. IEEE802.1x, the widely used authentication protocol, is based on the Extensible Authentication Protocol（EAP）. EAP provides a lot of specific protocols, most of which have their own advantages and disadvantages. The disvantages include lacking protection of user name and mutual authentication and difficulty in deployment. This paper presents a new hash-based authentication protocol, which aims to avoid the above disadvantages of protocols. Authentication process and security analysis is explained in detail. Comparison with some protocols is also provided.