802.11w-2009：无线局域网管理帧保护标准

5星 · 超过95%的资源需积分: 31 159 浏览量更新于2024-08-02 3 收藏 1.13MB PDF 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

"802.11w-2009是IEEE为无线局域网（WLAN）制定的一项标准修订，旨在提供保护管理帧的机制。该修正案是IEEE 802.11-2007标准的第四次修订，同时考虑了IEEE 802.11k-2008、802.11r-2008和802.11y-2008的修订内容。标准编号为802.11w-2009，发布日期为2009年9月25日，包含111页，格式为PDF。" 802.11w-2009标准详细介绍了如何增强WLAN的安全性，特别是针对管理帧的保护。在无线网络中，管理帧是用于网络配置、连接建立和维护的关键数据包，如关联请求、认证响应和解除关联等。由于这些帧不涉及用户数据，早期的802.11标准并未强制要求对它们进行加密，这使得网络容易受到中间人攻击、伪造的解除关联帧和其他恶意操作。 802.11w引入了受保护的管理帧协议（Protected Management Frame Protocol, PMF），它要求对管理帧进行加密和完整性保护，以确保网络操作的可靠性和安全性。PMF通过使用802.11i定义的WPA2（Wi-Fi Protected Access 2）中的AES-CCMP（高级加密标准-计数器模式密码块链消息认证码）加密算法来实现这一目标。这使得攻击者更难干扰或篡改网络的管理过程，增强了网络的整体安全性能。此外，802.11w与802.11k、802.11r和802.11y一起工作，以提高WLAN的效率和功能。802.11k提供了射频环境的范围和相邻接入点的信息，帮助设备选择最佳连接。802.11r则实现了快速基本服务集转换（Fast Basic Service Set Transition, FBT），允许移动设备在不同接入点间快速切换而无需重新认证。802.11y扩展了802.11a的频谱范围，允许在36-64GHz的未授权频段进行通信，增加了带宽和连接的可能性。 802.11w的实施对于任何需要高度安全性的无线网络环境都是至关重要的，例如企业网络、公共服务部门和高敏感信息传输的场景。标准的制定者——LAN/MAN Standards Committee（局域网/城域网标准委员会）致力于不断改进和增强无线网络的技术标准，以适应日益复杂的安全挑战和网络需求。

资源详情

资源推荐

10.3.41.2 MLME-PDDSETPC.confirm ................................................................ 62

10.3.41.2.1 Function ............................................................................. 62

10.3.41.2.2 Semantics of the service primitive..................................... 62

10.3.41.2.3 When generated ................................................................. 63

10.3.41.2.4 Effect of receipt ................................................................. 63

10.3.41.3 MLME-PDDSETPC.indication ............................................................. 63

10.3.41.3.1 Function ............................................................................. 63

10.3.41.3.2 Semantics of the service primitive..................................... 63

10.3.41.3.3 When generated ................................................................. 63

10.3.41.3.4 Effect of receipt ................................................................. 63

10.3.41.4 MLME-PDDSETPC.response ............................................................... 64

10.3.41.4.1 Function ............................................................................. 64

10.3.41.4.2 Semantics of the service primitive..................................... 64

10.3.41.4.3 When generated ................................................................. 64

10.3.41.4.4 Effect of receipt ................................................................. 64

10.3.42 Protected Enablement .............................................................................................. 64

10.3.42.1 MLME-PDENABLEMENT request ..................................................... 64

10.3.42.1.1 Function ............................................................................. 64

10.3.42.1.2 Semantics of the service primitive..................................... 64

10.3.42.1.3 When generated ................................................................. 65

10.3.42.1.4 Effect of receipt ................................................................. 65

10.3.42.2 MLME-PDENABLEMENT.confirm .................................................... 65

10.3.42.2.1 Function ............................................................................. 65

10.3.42.2.2 Semantics of the service primitive..................................... 65

10.3.42.2.3 When generated ................................................................. 66

10.3.42.2.4 Effect of receipt ................................................................. 66

10.3.42.3 MLME-PDENABLEMENT.indication................................................. 66

10.3.42.3.1 Function ............................................................................. 66

10.3.42.3.2 Semantics of the service primitive..................................... 66

10.3.42.3.3 When generated ................................................................. 67

10.3.42.3.4 Effect of receipt ................................................................. 67

10.3.42.4 MLME-PDENABLEMENT response................................................... 67

10.3.42.4.1 Function ............................................................................. 67

10.3.42.4.2 Semantics of the service primitive..................................... 67

10.3.42.4.3 When generated ................................................................. 68

10.3.42.4.4 Effect of receipt ................................................................. 68

10.3.43 Protected Deenablement .......................................................................................... 68

10.3.43.1 MLME-PDDEENABLEMENT.request................................................ 68

10.3.43.1.1 Function ............................................................................. 68

10.3.43.1.2 Semantics of the service primitive..................................... 68

10.3.43.1.3 When generated ................................................................. 68

10.3.43.1.4 Effect of receipt ................................................................. 68

10.3.43.2 MLME-PDDEENABLEMENT.confirm............................................... 69

10.3.43.2.1 Function ............................................................................. 69

10.3.43.2.2 Semantics of the service primitive..................................... 69

10.3.43.2.3 When generated ................................................................. 69

10.3.43.2.4 Effect of receipt ................................................................. 69

10.3.43.3 MLME-PDDEENABLEMENT.indication............................................ 69

10.3.43.3.1 Function ............................................................................. 69

10.3.43.3.2 Semantics of the service primitive..................................... 70

10.3.43.3.3 When generated ................................................................. 70

10.3.43.3.4 Effect of receipt ................................................................. 70

10.3.44 Vendor Specific Public Action ................................................................................ 70

10.3.44.1 MLME-PVSPECIFIC request ............................................................... 70

10.3.44.1.1 Function ............................................................................. 70

10.3.44.1.2 Semantics of the service primitive..................................... 70

10.3.44.1.3 When generated ................................................................. 71

10.3.44.1.4 Effect of receipt ................................................................. 71

10.3.44.2 MLME-PVSPECIFIC.confirm .............................................................. 71

10.3.44.2.1 Function ............................................................................. 71

10.3.44.2.2 Semantics of the service primitive..................................... 71

10.3.44.2.3 When generated ................................................................. 72

10.3.44.2.4 Effect of receipt ................................................................. 72

10.3.44.3 MLME-PVSPECIFIC.indication........................................................... 72

10.3.44.3.1 Function ............................................................................. 72

10.3.44.3.2 Semantics of the service primitive..................................... 72

10.3.44.3.3 When generated ................................................................. 72

10.3.44.3.4 Effect of receipt ................................................................. 72

11. MLME ............................................................................................................................................... 73

11.3 STA authentication and association....................................................................................... 73

11.3.1 Authentication and deauthentication ....................................................................... 73

11.3.1.1 Authentication—originating STA.......................................................... 73

11.3.1.2 Authentication—destination STA.......................................................... 73

11.3.2 Association, reassociation, and disassociation ........................................................ 73

11.3.2.2 AP association procedures..................................................................... 73

11.3.2.4 AP reassociation procedures.................................................................. 74

11.11 DSE procedures ..................................................................................................................... 74

11.11.1 General..................................................................................................................... 74

11.12 Broadcast and multicast Robust Management frame procedures .......................................... 75

11.13 SA Query procedures............................................................................................................. 75

11A. Fast BSS Transition ........................................................................................................................... 75

11A.2 Key holders ............................................................................................................................ 75

11A.2.2 Authenticator key holders ........................................................................................ 75

11A.4 FT initial mobility domain association .................................................................................. 76

11A.4.2 FT initial mobility domain association in an RSN .................................................. 76

11A.5 FT protocol ............................................................................................................................ 77

11A.5.2 Over-the-air FT protocol authentication in an RSN ................................................ 77

11A.5.3 Over-the-DS FT Protocol authentication in an RSN ............................................... 78

11A.6 FT Resource Request Protocol .............................................................................................. 79

11A.6.2 Over-the-air fast BSS transition with resource request ........................................... 79

11A.6.3 Over-the-DS fast BSS transition with resource request........................................... 79

11A.7 FT reassociation ..................................................................................................................... 80

11A.7.1 FT reassociation in an RSN ..................................................................................... 80

11A.8 FT authentication sequence ................................................................................................... 80

11A.8.5 FT authentication sequence: contents of fourth message ........................................ 80

11A.9 FT security architecture state machines................................................................................. 81

11A.9.3 R1KH state machine ................................................................................................ 81

Annex A (normative) Protocol Implementation Conformance Statement (PICS) proforma ........................ 83

A.4 PICS proforma—IEEE Std 802.11-2007........................................................................... 83

A.4.4 MAC protocol ...................................................................................................... 83

A.4.4.1 MAC protocol capabilities .................................................................... 83

List of figures

Figure 5-13—Establishing pairwise and group keys ....................................................................................... 6

Figure 5-14—Delivery of subsequent group keys ........................................................................................... 7

Figure 7-72—RSN Information Element format........................................................................................... 14

Figure 7-74—RSN Capabilities field format................................................................................................. 17

Figure 7-95o6a—IGTK sub-element format ................................................................................................. 18

Figure 7-95o15—Management MIC information element format ................................................................ 19

Figure 7-95o16—Vendor Specific Public Action frame format ................................................................... 21

Figure 7-101m—SA Query Request frame details........................................................................................ 22

Figure 7-101n—SA Query Response frame details ...................................................................................... 22

Figure 8-17—AAD construction ................................................................................................................... 25

Figure 8-18—Nonce construction ................................................................................................................. 26

Figure 8-19a—BIP Encapsulation ................................................................................................................. 28

Figure 8-19b—BIP AAD Construction ......................................................................................................... 28

Figure 8-32a—IGTK KDE format ................................................................................................................ 37

Figure 8-33—Sample 4-Way Handshake ...................................................................................................... 39

Figure 8-34—Sample Group Key Handshake ............................................................................................... 41

Figure 8-35—RSNA Supplicant key management state machine................................................................. 41

Figure 8-37—Authenticator state machines, part 1 ....................................................................................... 45

Figure 8-40—Authenticator state machines, part 4 ....................................................................................... 46

Figure 11A-2—FT Initial Mobility Domain Association in an RSN ............................................................ 76

Figure 11A-4—Over-the-air FT Protocol in an RSN .................................................................................... 77

Figure 11A-5—Over-the-DS FT Protocol in an RSN ................................................................................... 78

Figure 11A-9—Over-the-air FT Resource Request Protocol in an RSN ...................................................... 79

Figure 11A-14—R1KH state machine, including portions of the SME (part 1) ........................................... 81

Figure 11A-15—R1KH state machine, including portions of the SME (part 2) ........................................... 82

List of tables

Table 7-9—Disassociation frame body ........................................................................................................... 9

Table 7-13—Reassociation Response frame body ........................................................................................ 10

Table 7-11—Association Response frame body ........................................................................................... 10

Table 7-18—Deauthentication frame body ................................................................................................... 11

Table 7-19—Action frame body.................................................................................................................... 11

Table 7-23—Status codes .............................................................................................................................. 11

Table 7-24—Category values ........................................................................................................................ 12

Table 7-26—Element IDs.............................................................................................................................. 13

Table 7-32—Cipher suite selectors................................................................................................................ 16

Table 7-33—Cipher suite usage .................................................................................................................... 16

Table 7-34—AKM suite selectors ................................................................................................................. 17

Table 7-43g—Sub-element IDs ..................................................................................................................... 18

Table 7-43h—Timeout Interval Type field value.......................................................................................... 19

Table 7-57e—Public Action field values....................................................................................................... 20

Table 7-57l—SA Query Action fields ........................................................................................................... 21

Table 7-57m—Protected Dual of Public Action field values ........................................................................23

Table 8-1a—Robust Management frame selection in an ESS....................................................................... 31

Table 8-1b —Robust Management frame selection in an IBSS.................................................................... 32

Table 8-2—Cipher suite key lengths ............................................................................................................. 37

Table 8-4—KDE............................................................................................................................................ 37

剩余110页未读，继续阅读

homey123

粉丝: 3
资源: 14

802.11w-2009：无线局域网管理帧保护标准

IEEE 802.11标准官方PDF文档免费下载1

IEEE Std 802.11-2007

802.11d/e/h/i/j/k/r/v/w/mc

802.11a/b/g/n/ac协议是TCP/IP协议吗

编写实现WIFI、蓝牙、TCP/IP、CoAP、MQTT、HTTP(S)、SSL/TLS 的协议栈的例程代码

Cisco无线路由器介绍

wifi基础知识培训

与华为optixstar w626e的区别

esp8266-01s原理图

你知道E103-W04吗

高通sdm429w资料

STM32常用的网络芯片

wpa-psk口令攻击实验

华为s100-16t参数

hostapd MTU

88W8686系统各功能模块介绍

import uhd

基恩士sr2000w与plc应用

最新资源