A MANAGEMENT FRAME PROTECTION METHOD AND DEVICE BASED ON WLAN AUTHENTICATION AND PRIVACY INFRASTRUCTURE

摘要

A management frame protection method based on WLAN Authentication and Privacy Infrastructure (WAPI) includes the protection of a unicast management frame. The method includes following steps: a transmitter calculates a Message Integrity Code (MIC) of the unicast management frame's frame body with a Unicast Session Key (USK), then encrypts and encapsulates it; a receiver decrypts the message with the USK according to the procedure defined in the WAPI standard, and verifies the validity of the MIC in the MIC field; if the verification succeeds, which shows the message is not tampered illegally, then the receiver performs the operations according to the unicast management frame, otherwise the receiver discards the unicast management frame. The similar effect of protecting the multicast management frame with Multicast Session Key (MSK) can be achieved. The present invention enables the protection of unicast and multicast management frames, and protects network from attacks of forged management frames.