Device for Realizing Security Function in Mac of Portable Internet System and Authentication Method Using the Device

An authentication method for performing equipment authentication of a subscriber station or a base station based on a security device in a medium access control (MAC) layer of a wireless portable Internet system, the authentication method comprising:

• authenticating a message transmitted/received between the subscriber station and the base station by using a message authentication module of the security device;
• determining and analyzing the transmitted/received message by using a control message processing module of the security device;
• performing Rivest Shamir Adleman (RSA)-based equipment authentication based on the message transmitted/received between the subscriber station and the base station, by using the message authentication module, the control message processing module, a privacy key management (PKM) control management module, and an RSA-based authentication module of the security device, when the message relates to the RSA-based authentication;
• and
• generating and transmitting a message including a result of the equipment authentication, by using the message authentication module, the control message processing module, and the PKM control management module of the security device.

An authentication method for performing equipment authentication of a subscriber station or a base station, or user authentication based on a security device in a medium access control (MAC) layer of a wireless portable Internet system, the authentication method comprising:

• authenticating a message transmitted/received between the subscriber station and the base station by a message authentication module of the security device;
• determining and analyzing the transmitted/received message by a control message processing module of the security device;
• performing extensible authentication protocol (EAP)-based equipment authentication or user authentication based on the message transmitted/received between the subscriber station and the base station, by using the message authentication module, the control message processing module, a privacy key management (PKM) control management module, and an EAP encapsulation/decapsulation module of the security device when the message relates to the EAP-based authentication;
• and
• generating and transmitting a message including a result of the equipment authentication or the user authentication, by using the message authentication module, the control message processing module, and the PKM control management module of the security device.

A method for realizing a security sublayer in a medium access control (MAC) layer of a wireless portable Internet system, the method comprising:

• forming a message authentication module accessed to a physical layer, the message authentication module for authenticating a message transmitted/received between a subscriber station and a base station;
• forming a control message processing module accessed to the physical layer and located at a module higher than the message authentication module, the control message processing module for processing the transmitted/received message;
• forming a Rivest Shamir Adleman (RSA)-based authentication module for performing equipment authentication of the subscriber station or the base station based on the transmitted/received message when the message relates to RSA-based authentication;
• forming an extensible authentication protocol (EAP) encapsulation/decapsulation module accessed to a higher layer of the MAC layer, the EAP encapsulation/decapsulation module for performing the equipment authentication or user authentication based on the transmitted/received message when the message relates to EAP-based authentication;
• and
• forming a privacy key management (PKM) control management module located among the control message processing module, the RSA-based authentication module, and the EAP encapsulation/decapsulation module, the PKM control management module for generating a result message based on a result of the equipment authentication or the user authentication and transmitting the result message through the physical layer.