Abstract: This paper makes an analysis of the authentication protocol of the Chinese Wireless LAN security standard WAPI(Wireless Authentication and privacy Infrastructure) implementation plan using an enhanced BAN logic—AUTLOG logic. Results show that when the authentication protocol is finished, STA and AP can authenticate each other’s identity and establish a shared pairwise master key. We further conclude that this implementation plan has modified the security issues of the original standard, and thus it can completely reach the authentication goals and satisfy desirable security attributes.

Key words: WLAN, WAPI, security analysis, AUTLOG logic