802. 1x: Port - Based Access Control Protocol

YUAN Jian-guo,FANG Ning-sheng,JIANG Hao

DOI: https://doi.org/10.3969/j.issn.1673-629x.2005.12.055

2005-01-01

Abstract:Introduces the principle of 802.1x protocol,which is a port-based access control protocol,then it supplies an application scheme of 802.1x which is implemented with Windows XP+Cisco 3550+Freeradius+MySQL.It has been proved to be very simple and efficient in practice.

What problem does this paper attempt to address?

Solution to VPN and Authentication System

LI Jian-jun,XU Duan-qing,GUO Wei-qing

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.09.068

2005-01-01

Abstract:Combining with living examples and based on IPSEC,the realization of the VPN system was approached in many internet circumstances of remote access(such as gateway,broadband,xDSL etc.),and in view of the deficiency and the hidden troubles of the traditional static password,introduces a working mechanism was introduced which took into consideration both the tokencard two factor authentication and Windows AD,and proveds to be flexible and liable for the single-sign on clients.
LAN Access and Authentication Scheme Based on 802.1X

刘海旺,邱卫东,黄征

DOI: https://doi.org/10.3969/j.issn.1009-8054.2009.03.026

2009-01-01

Abstract:With the large-scale development of family,enterprise and other LAN applications,servers urge to control and configurate users' access.With this background,the paper analyazes the certification process of 802.1x protocol and presents a solution suitable to the application of LAN access cerlification.Experiment indicates that these are still certain limits in extensibility of this solution.
Fingerprint-based Authentication in Networking Environment

朱建新,杨小虎

DOI: https://doi.org/10.3969/j.issn.1001-3695.2001.12.004

2001-01-01

Abstract:Network security is an important research area in the application of information system now,How to implement effective access control based on user's identity is very important. This paper briefly introduces the concept and technology of authentication first,and analyze the technology of biometric identification,then points out that fingerprint-based biometric identification in networking environment combining data transfer encrypt is a reliable method for control user's access and protect information system,and describes the design and implementation of fingerprint-based authentication system in networking environment.
Access Control of WLAN Based on 802.1x and DHCP Access Control Gateway

王建忠,张忠能

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.z1.127

2004-01-01

Abstract:As to the security problem faced by wireless LAN at present, this paper introduces the theory and characteristics of the 802.1x and on which it provides a DHCP access control gateway with user authentication in order to achieve the authentication and access control in wireless network. This solution solves the access control problem in DHCP environment.
Design and Implementation of Unified Access Control System Based on LDAP

ZHENG Lan,CHEN Qi

DOI: https://doi.org/10.3969/j.issn.1000-7024.2005.07.058

2005-01-01

Abstract:With the rapid growth of internet and enterprises on a global scale, the use of directories as accessible repositories providesa flexible and various solution for gathering, storage and accessing information. The design and implementation of an unified accesscontrol system supporting single-sign-on areintrodueed, whichis based on LDAPdirectory and combines access controls ofall applicationsystems to realize security access system of unified users management. The system used middleware technology to efficiently resolvethe bottleneck problem when a lot of users accesed LDAP database.
Extensible Authentication Protocol (EAP) over PPP

熊海泉,潘雪增,平玲娣

DOI: https://doi.org/10.3969/j.issn.1000-3428.2003.13.054

2003-01-01

Abstract:Extensible authentication protocol is a gerenal authentication protocol over PPP. It can support a lot of authentication machanisms. This paper dissects the design and implementation of EAP over PPP on the basis of PPP meachanism.
Design and Implement of Enhanced SNMP Access Control

HE Tian-he,PAN Xue-zeng

DOI: https://doi.org/10.3969/j.issn.1671-7147.2007.03.016

2007-01-01

Abstract:SNMP provides a way to manage and monitor the computer network.By extending its access control model on the 3rd version,the paper offers two methods : view based access control model(vacm) and role based access control model.It enhances RBAC's power and function.In use SNMPv3 based on Time Enhanced RBAC is more efficient and useful.
Study of Network Authentication Based on RADIUS Protocol

YANG Jian-jun,JIA Chen-jun,RAN Li-xin

DOI: https://doi.org/10.3785/j.issn.1008-973x.2005.02.014

2005-01-01

Abstract:By analyzing the principle of remote authentication dial in user service (RADIUS) protocol and the applied security algorithm, an improved RADIUS protocol was proposed to enhance the security performance of networks.Based on the improved protocol,AAA (authentication,authority and account) architecture was set up for the Internet service providers.The AAA architecture for wireless gateway does not increase the complexity of the communication systems, and is simple and easy to implement.
Design of campus comprehensive access management platform

Cai E. Xu,Feng Xu,Xiaohua Li,Dongming Lu,Yanqi Cheng

DOI: https://doi.org/10.3969/j.issn.1000-436x.2013.z2.027

2013-01-01

Abstract:Considering access control with more card, scattered access flow data and poor scalability in current university building multi-system, the campus integrated access management platform triple frame design with the core of perception layer, transport layer and application layer was proposed. Campus card access control applications based on a unified data processing were realized, by method of Media and unified campus card authorization, implementing hierarchical management and access networking, comprehensively regulate access standards and centralized storage of data water. The design not only facilitates the management of school access control applications, but also carries out data mining based access control and lay the foundation for leadership decision-making support.
Management System in Routing and Switching Platforms

Chun Long Li,Xiang Qun Wang,Zeng Hua Zhang,He Wang,Xiao Yan Sun

DOI: https://doi.org/10.4028/www.scientific.net/amr.760-762.1033

2013-01-01

Advanced Materials Research

Abstract:Routing and switching platforms are widely used in modern communication equipments, network management based on routing and switching platform has a significant meaning and a prospect of application. The article briefly describes the routing and switching platform ZebOS and the Simple Network Management Protocol SNMP, it explains the implementation method and workflow of SNMP network management used in routing and switching platform, and it realizes the configuration and management of routing exchange platform.
OPC BASED ETHERNET CONTROL AND MANAGEMENT

范兴刚,王智,孙优贤,汪琳

DOI: https://doi.org/10.3969/j.issn.1002-0411.2003.02.004

2003-01-01

Information and Control

Abstract:The network management control is a process that makes network high-efficiency. SNMP is the most popular network management. Its key is the group of objects that was stored in management agency and controlled by management station. ASN.1 defines and encodes the objects. All of objects are in MIB. OPC(OLE for Process Control) provides standard interface for different equipment. It makes it easy to obtain information from other equipment. This is the basis for ethernet control.
A Mutual Authentication and Privacy Mechanism for WLAN Security.

Yixin Jiang,Chuang Lin,Hao Yin,Zhen Chen

DOI: https://doi.org/10.1002/wcm.448

2006-01-01

Wireless Communications and Mobile Computing

Abstract:IEEE 802.11 wireless local area networks (WLAN) has been increasingly deployed in various locations because of the convenience of wireless communication and decreasing costs of the underlying technology. However, the existing security mechanisms in wireless communication are vulnerable to be attacked and seriously threat the data authentication and confidentiality. In this paper, we mainly focus on two issues. First, the vulnerabilities of security protocols specified in IEEE 802.11 and 802.1X standards are analyzed in detail. Second, a new mutual authentication and privacy scheme for WLAN is proposed to address these security issues. The proposed scheme improves the security mechanisms of IEEE 802.11 and 802.1X by providing a mandatory mutual authentication mechanism between mobile station and access point (AP) based on public key infrastructure (PKI), offering data integrity check and improving data confidentiality with symmetric cipher block chain (CBC) encryption. In addition, this scheme also provides some other new security mechanisms, such as dynamic session key negotiation and multicast key notification. Hence, with these new security mechanisms, it should be much more secure than the original security scheme. Copyright © 2006 John Wiley & Sons, Ltd.
The Security Analysis and Detection of 802. 1X Wireless Local Area Network

Yuyang XUE,Hao ZHOU,Baohua ZHAO

DOI: https://doi.org/10.3321/j.issn:0253-987X.2009.10.011

2009-01-01

Abstract:Aimed at the problem that the vulnerable wireless local area network (WLAN) 802.1X protocol is not susceptible to replay and DoS (denial of service) attacks, etc, an informal method is introduced to analyze the security properties of 802.1X protocol. The method classifies attack behaviors according to the ability of attackers, and from the aspect of the role which attackers can play in the protocols (i.e., imitating normal protocol behavior or breaking normal communication). Then a new method, WLAN active testing, is proposed. Attacks to the protocol running mainbody are implemented by simulating the actions of the attacker which can be used to make up protocol messages. The results are used to determine whether the protocol security vulnerabilities exist or not. Testing results show that the method combines characteristics of both the attacker and the tester to cover some known protocol security vulnerabilities, and has the ability to reveal some potential problems.
Detection Methods for 802. 1X Protocol Attacks Using State Machine

朱加伟,周颢,赵保华

2010-01-01

Abstract:There are some loopholes in 802.1X protocol such as replay attacks,DoS (Denial of Service) attacks and so on. The paper presents an state transition process for certification of 802.1X,and designs an attack state transfer mechanism for functional attacks. The architecture of 802.11 frames,EAPOL frames and EAP frames are analyzed. The replay frames are deleted and
Researches on IEEE 802.11 Access Mechanism

Qin Yu,Yuming Mao,Zhiguang Qin

DOI: https://doi.org/10.1109/icccas.2008.4657795

2008-01-01

Abstract:In this paper, the key technology of IEEE 802.11 access mechanism is studied. The two main access mechanism of IEEE 802.11 MAC layer protocol are DCF (Distributed Coordination Function) and PCF (Point Coordination Function). CSMA/CA is the basic media access control mechanism of DCF and RTS/CTS message exchange mechanism is optional. PCF is realized by polling mechanism of Access Point (AP). Virtual carrier sense and random backoff are two main collision avoidance technologies of IEEE 802.11 protocol.
Solution for Next Generation Wireless LAN Security

刘虹,翁惠玉

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.z1.118

2004-01-01

Abstract:The paper analyses the security limitation of the first generation wirless LAN.And it provides the security solution based on 802.1x technology for the next generation wirless LAN.The solution has stronger security at authentication and key management.
Aaa Architecture And Authentication For Wireless Lan Roaming

Minghui Shi,Humphrey Rutagemwa,Xuemin (Sherman) Shen,Jon W. Mark,Yixin Jiang,Chuang Lin

DOI: https://doi.org/10.1007/978-0-387-33112-6_11

2007-01-01

Abstract:A wireless LAN service integration architecture based on current wireless LAN hotspots is proposed to make migrating to new service cost effective. The AAA (Authentication, Authorization and Accounting) based mobile terminal registration signaling process is discussed. An application layer end-to-end authentication and key negotiation protocol is proposed to overcome the open air connection problem existing in wireless LAN deployment. The protocol provides a general solution for Internet applications running on a mobile station under various authentication scenarios and keeps the communications private to other wireless LAN users and foreign networks. A functional demonstration of the protocol is also given. The research results should contribute to rapid deployment of wireless LANs hotspot service.
A New Standard Protocol CCMP for WLAN Security

LIN Ming-wen,HU Fei

DOI: https://doi.org/10.3969/j.issn.1002-2279.2008.01.024

2008-01-01

Microprocessors

Abstract:The new standard IEEE 802.11i for WLAN security defines three protocols to protect the data transfer.The protocols offer higher data encryption and authentication performance,and are used to replace the IEEE 802.11 WEP security scheme.The paper mainly introduces the CCMP protocol,which is based on AES encryption algorithm using the Counter Mode with CBC-MAC(CCM) mode of operation and provides good security and performance in either hardware or software.
Access Control in New Network Environment

LIN Chuang,FENG Fu-Jun,LI Jun-Shan

DOI: https://doi.org/10.1360/jos180955

2007-01-01

Abstract:Access control is an important technology for system security, and its mechanism is different for different networks. This paper first introduces the characteristics and applications of three traditional access control policies which are DAC (discretionary access control), MAC (mandatory access control) and RBAC (role-based access control), introduces the UCON (usage control) model, and then analyzes access control technology and current researches in Grid, P2P and wireless environment respectively. In addition, this paper proposes that trustworthy networks as the developing goal of the next generation Internet require using trust-based the access control model to assure security. This paper investigates on the trust and reputation model in detail, and finally gives the prospects of access control.
Control in New Network Environment

LIN Chuang,FENG Fu-Jun,LI Jun-Shan

2007-01-01

Abstract:Access control is an important technology for system security, and its mechanism is different for different networks. This paper first introduces the characteristics and applications of three traditional access control policies which are DAC (discretionary access control), MAC (mandatory access control) and RBAC (role-based access control), introduces the UCON (usage control) model, and then analyzes access control technology and current researches in Grid, P2P and wireless environment respectively. In addition, this paper proposes that trustworthy networks as the developing goal of the next generation Internet require using trust-based the access control model to assure security. This paper investigates on the trust and reputation model in detail, and finally gives the prospects of access control.

802. 1x: Port - Based Access Control Protocol

Solution to VPN and Authentication System

LAN Access and Authentication Scheme Based on 802.1X

Fingerprint-based Authentication in Networking Environment

Access Control of WLAN Based on 802.1x and DHCP Access Control Gateway

Design and Implementation of Unified Access Control System Based on LDAP

Extensible Authentication Protocol (EAP) over PPP

Design and Implement of Enhanced SNMP Access Control

Study of Network Authentication Based on RADIUS Protocol

Design of campus comprehensive access management platform

Management System in Routing and Switching Platforms

OPC BASED ETHERNET CONTROL AND MANAGEMENT

A Mutual Authentication and Privacy Mechanism for WLAN Security.

The Security Analysis and Detection of 802. 1X Wireless Local Area Network

Detection Methods for 802. 1X Protocol Attacks Using State Machine

Researches on IEEE 802.11 Access Mechanism

Solution for Next Generation Wireless LAN Security

Aaa Architecture And Authentication For Wireless Lan Roaming

A New Standard Protocol CCMP for WLAN Security

Access Control in New Network Environment

Control in New Network Environment