Privacy Protection for WLAN

Abstract

Personal privacy involves personal information, personal activities and personal areas, among which the privacy of personal information is one of the core contents. It decides the development of the future mobile e-commerce and e-government. In this chapter, anonymity, a key technology to realize the privacy protection, is discussed. It is a very important feature for the WLAN security. The anonymity in WLAN is different from that in wired networks, which involves the identification anonymity, location anonymity, communication anonymity, action anonymity, and so forth. This chapter is a further study on the WLAN anonymity from the aspects of the anonymous connection method, and universally composable secure anonymous model. As for the anonymity connection, combined with the ESP protocol and AH protocol in IPSec and using the agent function of the Foreign Agent (FA) and Home Agent (HA) in Mobile IP, a WLAN anonymous schedule based on IPSec is introduced, which provides a mutual and real-time WLAN anonymous communication. It can efficiently prevent the traffic analysis attack in WLAN. Finally, an anonymous Hash certification ideal functionality and a more universal certificate CA model are proposed. We define the security requirements and security notions for this model in the framework of universally composable security and prove in the plain model (not in the random-oracle model) that these security notions can be achieved using combinations of a secure digital signature scheme, a symmetric encryption mechanism, a family of pseudorandom functions, and a family of one-way collision-free Hash functions.