强制门户模式与802.1X架构的集成
Integration of the Captive Portal paradigm with the 802.1X architecture
摘要：
在越来越多地使用热点无线网络的情况下，并且考虑到在互联网交互上交换的敏感信息的量，需要实现保证这种网络中的数据机密性和完整性以及热点提供商的真实性的安全机制。但是，现在许多热点使用强制门户，它依赖于通过Web页面进行身份验证（因此是一种应用程序级身份验证方法），而不是链路层方法。这样做的后果是，在到热点的无线链路中没有安全性（它必须在上层协议层提供），并且管理无线接入配置文件很麻烦（我们需要特殊的应用程序或浏览器的附加组件来做到这一点）。这项工作暴露了强制门户的模式，它不遵循一个独特的或标准的方法的弱点，并描述了一个解决方案，旨在抑制他们，基于802.1X架构。此解决方案使用一种新的EAP兼容协议，该协议能够将基于HTTP的注册或身份验证与802.1X身份验证框架内的强制门户集成。
英文摘要：
In a scenario where hotspot wireless networks are increasingly being used, and given the amount of sensitive information exchanged on Internet interactions, there is the need to implement security mechanisms that guarantee data confidentiality and integrity in such networks, as well as the authenticity of the hotspot providers. However, many hotspots today use Captive Portals, which rely on authentication through Web pages (thus, an application-level authentication approach) instead of a link-layer approach. The consequence of this is that there is no security in the wireless link to the hotspot (it has to be provided at upper protocol layers), and is cumbersome to manage wireless access profiles (we need special applications or browsers' add-ons to do that). This work exposes the weaknesses of the Captive Portals' paradigm, which does not follow a unique nor standard approach, and describes a solution that intends to suppress them, based on the 802.1X architecture. This solution uses a new EAP-compliant protocol that is able to integrate an HTTP-based registration or authentication with a Captive Portal within the 802.1X authentication framework.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
