Improved multicast key management of Chinese wireless local area network security standard

摘要

Multicasting is an important business in the field of the wireless local area network (WLAN), because the access point (AP) usually has to send the same message to each station (STA) of a specific group, and broadcasting the message to this group is one of the most efficient ways of communication. Chinese WLAN security standard, called WLAN Authentication and Privacy Infrastructure (WAPI), has taken secure multicasting into account, and proposed a Multicast Key Management Protocol (MKMP), in which the multicast session key (MSK) is distributed to each STA over the secure unicast channel built between STA and AP one by one. It is clear that the MSK distribution is very inefficient in performance, especially when the number of STAs is very large. In this study, a new MSK distribution protocol is proposed, and it can be used to substitute the original protocol in WAPI. Analyses show that the proposed protocol can achieve needed security requirements, and is more efficient than the original one in WAPI. Now, WAPI has been in the process of ISO/IEC standard building, and thus the authors think that their proposal can ameliorate WAPI largely and promote its ISO/IEC standard building.