IEEE 802.11에서의 접근 제어를 위한 Lightweight 패킷 인증
Lightweight Packet Authentication for Access Control in IEEE 802.11
0
조회
0
다운로드
0
인용
0
참고문헌
초록
IEEE 802.11은 보안상의 문제점이 많다는 것이 알려지게 되어, 강한 보안성을 제공하는 IEEE 802.11i 표준이 제안, 채택되었다. 하지만, 이는 WLAN을 단순히 웹 서핑을 하는데 사용하는 대부분의 사용자들에게 너무 많은 오버헤드를 요구한다. 한편, 통신을 하기 위해서는 노드 인증(node authentication)뿐만이 아니라 패킷 인증(packet authentication)도 필요하다. IEEE 802.11i에서는 이를 위해 TKIP(Temporal Key Integrity Protocol)과 CCMP(CTR with CBC-MAC Protocol)가 사용되지만, 오버헤드가 크다. 이 논문에서는 단순한 웹 서핑을 위한 오버헤드가 적은 패킷 인증 방법인 Lightweight Packet Authentication(LIPA)을 제안한다. 또한, LIPA의 성능을 TKIP, CCMP와 비교해보고, 특히 패킷 전송 시에 LIPA가 효율적이라는 것을 알아본다.
Abstract
Because IEEE 802.11 has several security vulnerabilities, IEEE 802.11i was proposed and accepted. But IEEE 802.11i has much overhead for most of users for the web surfing. Besides not only node the authentication but also the packet authentication is needed to communicate. Although IEEE 802.11i uses TKIP(Temporal Key Integrity Protocol) and CCMP(CTR with CBC-MAC Protocol), they have a lot of overheads. In this paper, Lightweight Packet Authentication(LIPA) is proposed. LIPA has less overhead and short delay so that it can be affordable for simple web-surfing which does not need stronger security. After comparing performances of LIPA with those of TKIP and CCMP, LIPA is more efficient than other schemes for transmitting packets.
참고문헌 (16)
- "Information Technology - Telecommunications and information exchange between systems - Local and metropolitan area networks - Specific requirements-part 11: Wireless Lan Medium Access Control (MAC) And Physical Layer (PHY) Specifications", 802(11), pp.445~ (1997)
- "Security flaws in 802.11 data link protocols Communications of the ACM", pp.35~39, Wireless networking security
- "2003 하반기 정보화실태조사 요약보고서", 정보통신부
- "fixed-cost authentication for access to reserved resources", pp.1049~1058 (2002)
- "RBWA: an efficient random-bit window-based authentication protocol", pp.1379~1383 (2003)
- "A One-bit Identiry Authentication Protocol for Access Control in IEEE 802.11", pp.768~772 (2002)
- "lightweight security for access control in IEEE 802.11", 6(3), pp.10~16
- "An Enhanced Lightweight Authentication Protocol for Access Control in Wireless LANs IEEE International Conference On Networks", pp.16~19 (2004)
- "Keyed-hashing for messageauthentication", 2104
- "MAC: Fast and secure message authentication", pp.216~233 (1999), Springer-Verlag
- "Security Architecture for the Internet Protocol", 2401
- "IEEE Standard for Information technology-Telecommunications and information exchange between systems- Local and metropolitan area networks-Specific requirements Part 11", pp.1~175 (2004)
- "A Note on the Fragility of the "Michael" Message Integrity Code", 3(5), pp.1459~1462
- "A Simple Unpredictable Pseudo-Random Number Generator", 15(2), pp.364~383 (1996)
- "Cryptography and Network Security Principles and Practice", 2, pp.74~75 (1999)
- "Handbook of Applied Cryptography", pp.175~184 (1997), CRC Press Inc.