縲君ETWORK WORLD 2004.7縲阪� 縲弱％縺薙′蜊ｱ縺ｪ縺�ｼ� 辟｡邱哭AN縺ｮ閼�ｨ� P132�霸144縲� 縺ｨ縺�≧險倅ｺ九�邯夂ｷｨ縺ｧ縺吶� 縲弱％縺薙′蜊ｱ縺ｪ縺�ｼ� 辟｡邱哭AN縺ｮ閼�ｨ√上〒縺ｯ縲√％繧後∪縺ｧ縺ｮ縲郡SID縺ｮ髫�阡ｽ縲阪勲AC繧｢繝峨Ξ繧ｹ繝輔ぅ繝ｫ繧ｿ繝ｪ繝ｳ繧ｰ縲阪係EP證怜捷蛹悶阪→縺�≧辟｡邱哭AN縺ｮ繧ｻ繧ｭ繝･繝ｪ繝�ぅ蟇ｾ遲悶′縺�°縺ｫ閼�ｼｱ縺ｪ繧ゅ�縺�縺ｨ縺�≧縺薙→繧定ｧ｣隱ｬ縺励※縺�ｋ繧ゅ�縺ｧ縺励◆縲� 縲後§繧�√←�槭☆繧後�縺�＞縺ｮ�滂ｼ滂ｼ溘� 縺ｨ縺�≧縺薙→縺ｮ遲斐∴縺後∽ｻ雁屓縺ｮ縲主ｮ医ｌ�∫┌邱哭AN縲上〒縺吶� 譁ｰ縺励＞辟｡邱哭AN縺ｮ繧ｻ繧ｭ繝･繝ｪ繝�ぅ蟇ｾ遲悶→縺励※縲� 繝ｻIEEE802.1X 繝ｻWPA(WiFi Protected Access) 繝ｻIEEE802.11i 縺後≠繧翫∪縺吶� 險倅ｺ九〒縺ｯ縲�3縺､縺ｮ繝代�繝医↓蛻�￠縺ｦ蜷�そ繧ｭ繝･繝ｪ繝�ぅ蟇ｾ遲悶↓縺､縺�※縲√◎縺ｮ邨檎ｷｯ縺九ｉ蜍穂ｽ懊�莉慕ｵ�∩縺ｾ縺ｧ隗｣隱ｬ縺輔ｌ縺ｦ縺�∪縺吶� Part1縺ｯ縺ｾ縺唔EEE802.1X(莉･荳九�802.1X)縺ｧ縺吶� IEEE802.1X縺ｧ縺ｯ縲√←縺�＞縺�ｩ溯�縺梧署萓帙＆繧後ｋ縺九→縺�≧縺薙→縺ｫ縺､縺�※譏守｢ｺ縺ｫ遉ｺ縺輔ｌ縺ｦ縺�∪縺吶�802.1X縺ｧ縲梧囓蜿ｷ骰ｵ縺ｮ驟榊ｸ��譖ｴ譁ｰ縲阪→縲後Θ繝ｼ繧ｶ繝ｼ隱崎ｨｼ縲阪ｒ謠蝉ｾ�縺吶ｋ縺薙→縺後〒縺阪∪縺吶ゅｂ縺ｨ繧ゅ→蜆ｪ蜈�LAN縺ｧ縺ｮ繧ｹ繧､繝�メ縺ｮ遨ｺ縺阪�繝ｼ繝医↓繧ｱ繝ｼ繝悶Ν繧呈欠縺励※PC繧呈磁邯壹☆繧後�縲´AN縺ｫ蜿ょ刈縺ｧ縺阪※縺励∪縺�％縺ｨ繧貞宛蠕｡縺吶ｋ縺溘ａ縺ｮ繝励Ο繝医さ繝ｫ縺�縺｣縺溘�縺ｧ縺吶′縲√％繧後′辟｡邱哭AN縺ｮ繝九�繧ｺ縺ｫ繝槭ャ繝√＠縺溘�縺ｧ縲∫┌邱哭AN縺ｮ繧ｻ繧ｭ繝･繝ｪ繝�ぅ謚陦薙→縺励※豕ｨ逶ｮ縺輔ｌ縺ｦ縺�ｋ縺薙→縺瑚ｧｦ繧後ｉ繧後※縺�∪縺吶� 隱崎ｨｼ繧定｡後≧EAP(Extensible Authentication Protocol)縺ｫ縺､縺�※縲√窪AP-TLS縲阪，isco縲鍬EAP縲阪�EAP繧ｿ繧､繝励�莉慕ｵ�∩縺後■繧�≧縺ｩ遏･繧翫◆縺�→諤昴▲縺ｦ縺�→縺薙ｍ縺ｪ縺ｮ縺ｧ縲∝ｽｹ縺ｫ遶九■縺昴≧縺ｧ縺吶ゅ∪縺�縺悶▲縺ｨ縺励°隱ｭ繧薙〒縺�↑縺��縺ｧ縲√％縺ｮ霎ｺ縺ｯ縺薙ｌ縺九ｉ繧ゅ≧蟆代＠隧ｳ縺励￥隱ｭ縺ｿ縺溘＞縺ｪ縺ｨ諤昴▲縺ｦ縺�∪縺吶� Part2縺ｧ縺ｯ縲仝PA縺ｧ縺吶� 蜴ｻ蟷ｴ縺ゅ◆繧翫°繧峨↓逶帙ｓ縺ｫ蟇ｾ蠢懆｣ｽ蜩√′蜃ｺ縺輔ｌ縺ｦ縺�ｋ逅�罰縺後√％縺ｮ險倅ｺ九ｒ隱ｭ繧薙〒蟋九ａ縺ｦ遏･繧翫∪縺励◆縲ゅｂ縺ｨ繧ゅ→Part3縺ｮIEEE802.11i縺ｮ繧ｵ繝悶そ繝�ヨ縺ｨ縺励※WPA縺梧署譯医＆繧後※縺�※縲∬ｨｭ險育岼讓吶�荳ｭ縺ｫ 繝ｻ2003蟷ｴ荳ｭ縺ｫ蛻ｩ逕ｨ縺ｧ縺阪ｋ 縺ｨ縺�≧縺薙→縺後≠縺｣縺溘ｈ縺�↑繧薙〒縺吶�縲ゅ→縺ｫ縺九￥辟｡邱哭AN縺ｮ繧ｻ繧ｭ繝･繝ｪ繝�ぅ繧堤｢ｺ菫昴☆繧九◆繧√↓縲�802.11i縺ｧ繧�ｌ縺ｦ縺�ｋ驛ｨ蛻��縺吶▲縺ｨ縺ｰ縺励※讖溯�繧貞ｮ溯｣�＠縲�2003蟷ｴ縺ｮ譌ｩ縺�ｮｵ髫弱〒蛻ｩ逕ｨ蜿ｯ閭ｽ縺ｫ縺ｪ繧九ｈ縺�↓縺ｨ閠�∴縺ｦ縺�◆縺ｿ縺溘＞縺ｧ縺吶�縲ゅ＆繧峨↓縲�802.11i縺ｸ縺ｮ遘ｻ陦後ｒ繧ｹ繝�繝ｼ繧ｺ縺ｫ縺ｧ縺阪ｋ繧医≧縺ｫ縲√た繝輔ヨ繧ｦ繧ｧ繧｢繧｢繝��繧ｰ繝ｬ繝ｼ繝峨〒蛻ｩ逕ｨ蜿ｯ閭ｽ縺ｫ縺ｪ繧九％縺ｨ繧りｨｭ險育岼讓吶↓謖吶￡繧峨ｌ縺ｦ縺�∪縺吶よ昴ｏ縺壹√後∈縺�ｽ槭阪→險縺｣縺ｦ縺励∪縺�∪縺励◆(隨�)縲� WPA縺ｮ荳ｭ蠢�噪縺ｪ繝励Ο繝医さ繝ｫ縺後卦KIP(Temporal Key Integrity Protocol)縲阪〒縺吶５KIP縺ｧ荳譎ら噪縺ｪ證怜捷骰ｵ繧偵←縺ｮ繧医≧縺ｫ逕滓�縺励√ヱ繧ｱ繝�ヨ縺ｮ謨ｴ蜷域ｧ繧偵←縺ｮ繧医≧縺ｫ讀懆ｨｼ繝ｻ菫晁ｨｼ縺吶ｋ縺九→縺�≧2轤ｹ繧定ｦ丞ｮ壹＠縺ｦ縺�∪縺吶よ万繧∬ｪｭ縺ｿ縺励°縺励※縺�∪縺帙ｓ縺後ゝKIP縺ｮ莉慕ｵ�∩縺ｫ縺､縺�※隧ｳ縺励￥隗｣隱ｬ縺輔ｌ縺ｦ縺�∪縺吶� 邯壹￥縲￣art3縺ｯIEEE802.11i(莉･荳九�802.11i)縺ｧ縺吶� 802.11i縺ｯ迴ｾ譎らせ縺ｧ閠�∴縺�ｋ譛鬮倥�繧ｻ繧ｭ繝･繝ｪ繝�ぅ謚陦薙ｒ逶ｮ謖�＠縺ｦ讓呎ｺ門喧縺輔ｌ縺ｦ縺�ｋ縺昴≧縺ｧ縺吶よ怙鬮倥�繧ｻ繧ｭ繝･繝ｪ繝�ぅ繧貞ｮ溽樟縺吶ｋ縺溘ａ縺ｫ縲� 繝ｻ證怜捷蛹悶い繝ｫ繧ｴ繝ｪ繧ｺ繝�縲窟ES(Advanced Encryption Standard)縲� 繝ｻCCMP(Counter-mode with CBC MAC Protocol) 窶ｻCCNP縺倥ｃ縺ゅｊ縺ｾ縺帙ｓ繝ｻ繝ｻ繝ｻ(隨�) 繧剃ｽｿ縺�∪縺吶� CCMP縺ｯAES繧偵�繝ｼ繧ｹ縺ｫWPA縺ｮTKIP縺ｫ莉｣繧上ｋ繝励Ο繝医さ繝ｫ縺ｨ縺励※螳夂ｾｩ縺輔ｌ縺ｦ縺�∪縺吶�CCMP縺ｮ莉慕ｵ�∩縺ｫ縺､縺�※繧りｩｳ縺励＞隗｣隱ｬ縺後≠繧翫∪縺吶� 窶ｻWPA縲！EEE802.11i縺ｫ縺､縺�※縺ｯ縲 IT縺ｮ莉･荳九�URL繧ょ盾閠�↓縺励※縺上□縺輔＞縲� 縲燦EP縺ｫ螟峨ｏ繧区囓蜿ｷ謇区ｮｵ縲仝PA縺ｨ縺ｯ�� �曵EEE 802.11i縺ｨWPA�槭� 莉･荳翫�繧医≧縺ｫ縲�802.1X縲仝PA縲�802.11i縺ｨ縺�▲縺溘％繧後°繧峨�辟｡邱哭AN縺ｮ繧ｻ繧ｭ繝･繝ｪ繝�ぅ繧呈髪縺医ｋ謚陦薙↓縺､縺�※縲√◎縺ｮ逶ｮ逧�°繧臥匳蝣ｴ縺励※縺阪◆邨檎ｷｯ縲√�繝ｭ繝医さ繝ｫ縺ｮ莉慕ｵ�∩縺ｾ縺ｧ縺ゅ▲縺ｦ縲√☆縺斐￥縺�＞蜀�ｮｹ縺�縺ｨ諤昴＞縺ｾ縺励◆縲ゅ⊂縺剰�霄ｫ縺ｯ縲∵ｭ｣逶ｴ縺ｫ險縺�→縲�EAP縲ゝKIP縲，CMP縺ｮ莉慕ｵ�∩縺ｮ驛ｨ蛻��縺九↑繧企屮縺励￥縲√″縺｡繧薙→逅�ｧ｣縺ｧ縺阪※縺�∪縺帙ｓ縲ゅ〒繧ゅ√◎繧後◇繧後�讎りｦ√′蜊∝�縺ｫ逅�ｧ｣縺ｧ縺阪∪縺励◆縲� 縺薙�險倅ｺ九ｒ蜈ｨ驛ｨ螳悟�縺ｫ逅�ｧ｣縺吶ｋ縺ｮ縺ｯ縺｡繧�▲縺ｨ髮｣縺励＞縺ｨ諤昴＞縺ｾ縺吶′縲�豎ゅａ縺ｦ縺�ｋ諠��ｱ縺ｮ繝ｬ繝吶Ν縺ｫ蠢懊§縺ｦ隱ｭ繧薙〒縺ｿ繧�縺ｨ縺�＞縺ｧ縺吶�縲� 繝ｻ讎りｦ√□縺代ｒ遏･繧翫◆縺��縺具ｼ� 繝ｻ蜷��繝ｭ繝医さ繝ｫ縺ｮ豈碑ｼ�ｒ遏･繧翫◆縺��縺具ｼ� 繝ｻ邏ｰ縺九↑證怜捷蛹悶�繧｢繝ｫ繧ｴ繝ｪ繧ｺ繝�縺ｫ縺､縺�※遏･繧翫◆縺��縺具ｼ� �� �� �� 縺溘＞縺ｦ縺��豎ゅａ縺ｦ縺�ｋ繝ｬ繝吶Ν縺ｮ諠��ｱ繧貞ｾ励ｋ縺薙→縺後〒縺阪ｋ縲√ｈ縺��螳ｹ縺�縺ｨ諢溘§縺ｾ縺励◆縲� 縺ｼ縺上↓縺ｨ縺｣縺ｦ縺ｯ縲∵ｦりｦ√ｒ遏･繧翫◆縺九▲縺溘�縺ｧ縲∝香蛻�↑諠��ｱ繧貞ｾ励ｉ繧後∪縺励◆縲よ凾髢薙ｒ菴懊▲縺ｦ縲∵囓蜿ｷ蛹悶い繝ｫ繧ｴ繝ｪ繧ｺ繝�縺ｮ莉慕ｵ�∩縺ｪ縺ｩ縺輔ｉ縺ｫ豺ｱ縺丞級蠑ｷ縺励◆縺�〒縺吶�縲� 莨∵･ｭ縺ｧ辟｡邱哭AN繧貞ｰ主�縺励ｈ縺�→閠�∴縺ｦ縺�ｉ縺｣縺励ｃ繧区婿縺ｯ縲√％縺ｮ險倅ｺ九ｒ隱ｭ繧薙〒縺ｿ繧九％縺ｨ繧偵が繧ｹ繧ｹ繝｡縺励∪縺呻ｼ� 縲晒ETWORK WORLD縲上�隧ｳ邏ｰ縲∬ｳｼ隱ｭ逕ｳ縺苓ｾｼ縺ｿ縺ｫ縺､縺�※縺ｯ莉･荳九�URL繧偵＃隕ｧ縺上□縺輔＞縲� http://www.idg.co.jp/nw/teiki/ 窶ｻ螳壽悄雉ｼ隱ｭ繧ｭ繝｣繝ｳ繝壹�繝ｳ繧ゅｄ縺｣縺ｦ縺�ｋ繧医≧縺ｧ縺吶� |
(C) Copyright 2000-2004 Gene All Rights Reserved
