关键词: 有线等效保密（WEP）, RC4, 初始向量, 身份签名

Abstract: Based on the analysis on the security mechanism of Wireless Local Area Network（WLAN）, it is found that due to the Initialization Vector（IV） which is published by Wired Equivalent Privacy（WEP） protocol without encrypting, there are many serious secure leaks in its application. This paper proposes an efficient authentication mechanism using identity based signature to solve these problems. This scheme uses NAI（Network Access Identifier） as public key and simplifies the key management in wireless environment, and it can resolve the deficiency in the authentication of the IV. The analysis demonstrates that the scheme not only guarantees the confidentiality and non-repudiation of the IV but also is developed with consideration for taking advantages of the existing hardware facilities. It can also protect the IV from the attacks focusing on invariance weakness and IV weakness.

Key words: Wired Equivalent Privacy（WEP）, RC4, initialization vector, identity based signature