无线局域网的安全性问题已日渐成为重要的研究问题,其中,认证机制是安全机制的重要内容。无线局域网采用IEEE802.1x认证协议。本文针对IEEE802.1x/EAP-TLS认证机制存在的安全缺陷,提出了协议的改进方案,在现有认证机制的基础上增加对客户端STA和接入点AP之间的双向认证,从而提高无线局域网的安全性。 The security of wireless LAN has increasingly become an important research issue, of which the authentication mechanism is an important part of the security mechanism. Wireless LAN using IEEE802.1x authentication protocol. In this paper, aiming at the security flaws of IEEE802.1x / EAP-TLS authentication mechanism, an improved protocol is proposed. Based on the existing authentication mechanism, two-way authentication is added between the client STA and access point AP, LAN security.