wapi is a wireless LAN authentication and confidentiality infrastructure. It is a security protocol and a mandatory standard for wireless LAN security in China. It was proposed by the State Key Laboratory of Integrated Business Network Theory and Key Technologies of Xi'an University of Electronic Science and Technology; WAPI, like infrared, Bluetooth, GPRS, CDMA1X and other protocols, is a type of wireless transmission protocol.

The operating environment of this tutorial: Windows 7 system, Dell G3 computer.

WAPI (Wireless LAN Authentication and Privacy Infrastructure) is a wireless LAN authentication and privacy infrastructure. It is a security protocol and a mandatory standard for wireless LAN security in China. It was first developed by the Integrated Business Network Theory of Xi'an University of Electronic Science and Technology and proposed by the State Key Laboratory of Key Technologies.

WAPI is a type of wireless transmission protocol like infrared, Bluetooth, GPRS, CDMA1X and other protocols. The only difference is that it is a transmission protocol in wireless local area network (WLAN). It It is a technology in the same field as the 802.11 transmission protocol.

Function

1. For safety reasons.

In 2013, Snowden exposed the U.S. Prism scandal. He also disclosed that more than ten U.S. intelligence agencies, including the NSA, Department of Homeland Security, FBI, and CIA, had long-term cooperation with U.S. standard-setting agencies. , bury cryptographic algorithms and security mechanism solutions with obvious technical flaws into the international standards it leads and participates in, thereby implementing the technical standard control path of the global network monitoring plan. This has sounded the alarm for the network and information security of various countries. Countries have begun to re-examine WIFI security and the true intentions of the United States in blocking WAPI. This has also become an opportunity for WAPI to regain a new lease of life.

For individual users, the biggest benefit from the emergence of WAPI is to make their laptops more secure. We know that wireless LAN has fast transmission speed and wide coverage, so it is very vulnerable in terms of security. Because the data is exposed in the air during transmission, it is easy for people with ulterior motives to intercept the data packets. Although foreign manufacturers such as 3COM and Annet have developed a series of security solutions for 802.11, they are generally not satisfactory, and the core technology is in the hands of people from other countries. If they can formulate it, they must have a way. Cracking has become a major hidden danger for government and commercial users in using WLAN in terms of security. WIFI encryption technology has experienced the evolution of WEP, WPA, and WPA2, each time greatly improving security and cracking difficulty. However, due to its one-way authentication flaws, these encryption technologies have been cracked and published. WPA was cracked in 2008. WPA2 was cracked by hackers in the first half of 2010 and published online.

WAPI adopts a more reasonable two-way authentication encryption technology, which is more advanced than 802.11. WAPI uses the elliptic curve cryptographic algorithm of the public key system approved by the Office of the National Cryptography Management Committee and the grouping of the secret key system. The cryptographic algorithm realizes device identity authentication, link verification, access control and encryption protection of user information during wireless transmission. In addition, WAPI is divided into two types: single-point and centralized in terms of application mode, which can completely reverse the current situation of WLAN using multiple security mechanisms that coexist and are incompatible with each other, and fundamentally solve security and compatibility issues. Therefore, our country's mandatory requirement for relevant commercial organizations to implement WAPI standards can more effectively protect data security.

In addition, interconnection between devices is an issue that operators must consider. Currently, although many manufacturers' products claim to have passed Wi-Fi compatibility tests, the security solutions proposed and adopted by each manufacturer are different. For example, Annette (AT-WR2411 wireless network card) provides a multi-level security system, including spread spectrum coding and encryption technology. Secure information passes 40 and 128-bit Wired Equivalent Privacy (WEP) encryption methods; and 3Com’s wireless If the network card is used with the 3Com 11 Mbps Wireless LAN Access Point 6000, it can use advanced dynamic secure link technology. This technology is different from the shared key scheme. It automatically generates a 128-bit encryption key for each session. . In this way, due to the lack of unified security solution standards, different WLAN devices cannot communicate with each other when security functions are enabled. This will make the operator's equipment management extremely complex and require the development of different user management functions for different security solutions, resulting in operational and Maintenance costs are greatly increased, which is not conducive to investment protection, and users are unable to roam between different security APs (Access Points), which reduces customer satisfaction.

2. For the sake of interests.

Our country is a developing country with a booming economy. Many products have huge room for development, especially high-tech products. However, in the past, our country has lost many opportunities in high-tech products. Since there are very few independent core technologies and products with its own industry standards, it has resulted in a rather passive situation: DVDs have to be charged a large amount of patent fees by foreigners. GPRS, CDMA1X and other standards are all in the hands of foreigners. We can only obediently give a lot of money to others to buy their standards, while we are like workers who "work" for others. We can only go to Engage in OEM and help people assemble products. Therefore, some people say that "first-rate companies sell standards, second-rate companies sell technology, and third-rate companies sell products."

Related recommendations: "Programming Course"

The above is the detailed content of what is wapi. For more information, please follow other related articles on the PHP Chinese website!