無線網狀網路下的分散式AAA

Abstract

本論文基於現行無線網路的可移動性，及有線網路的限制，整合現行隨意無線網路與無線網狀網路，解決無線網路裝置發送訊號隨距離衰減，並提供安全認證使用無線網路的方式。 本論文利用無線網狀網路架構中的固定節點，配合其他的移動節點來，幫助移動節點與AAA伺服器交換資訊，已達到身份認證、授權與計費的功能。為了節省封包在無線網路中傳送的次數，將AAA伺服器分散在無線網狀網路下。並且使用(n,k) 閥值秘密共用將私密金鑰分散來做簽章，與預防式秘密共用來更新私密金鑰，以避免在無線網路下被攻擊者攻擊。而在完成了身份認證後，AAA伺服器會發與一張短期憑證供移動節點存取服務或與其他節點溝通。最後，分析比較在無線網狀網路中，分散式AAA伺服器與集中式AAA伺服器的優缺點。

This thesis base on the mobility of wireless network, and the restriction of wired network, we combine wireless ad hoc network, wireless mesh network (WMN), and wired network to generate a new architecture. This thesis solve the problem of wireless devices signals decay with the distance, and provide a secure authentication way. We use fixed node of WMN to help other movable nodes exchange information with AAA servers to do authentication, authorization, and accounting. In order to save the packet transferring on wireless network, we distributed AAA servers on WMN. Using (n,k) threshold secret sharing to do separate private key, and proactive secret sharing to update it. Moreover, this may avoid being attack. After mobile nodes authenticated, AAA servers issue a short-lived certificate for it to access services or communicate with other mobile nodes. Finally, we compare the advantage and disadvantage with distributed and centralized AAA server on WMN.